ebf320b6b11829799e0b3584cb3328fe_JaffaCakes118 | Triage

Sharing

General

Target

ebf320b6b11829799e0b3584cb3328fe_JaffaCakes118
Size

385KB
MD5

ebf320b6b11829799e0b3584cb3328fe
SHA1

063db10196dbabcd75e438e79bf88f779522a064
SHA256

508521fd7d9500b95c5ce2d34a4ef0a561e4bb27f55ecb6429a5a7e6e4b2494d
SHA512

23674c07ab294de79731a093a429bd65968a71ee4aad809aae68e3487a6e2f8d144584b1343bd3eef325dd9869156b05b9e0bfd1831c1b162f89947257fe0d30
SSDEEP

6144:fDxtcNK9kXt+ZswkbDBlkw488W3VzHuVhBz/0rj4dJVdbpmF7hhtKB:f7cNQkIZszbDbh3VzH+/z/0ry/dbMBUB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebf320b6b11829799e0b3584cb3328fe_JaffaCakes118

Files

ebf320b6b11829799e0b3584cb3328fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ