ec4b95da10ca7c86d18f6a1cbc943173_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec4b95da10ca7c86d18f6a1cbc943173_JaffaCakes118
Size

824KB
MD5

ec4b95da10ca7c86d18f6a1cbc943173
SHA1

788c41d2da698bda681f6efdb270e44a816f244d
SHA256

bd6efc4856f3b1159c5e3e63681504a97b1bcd4bcfb167abbba8f1ff81b5940a
SHA512

603813987fb461b6c7e8914168d229e649e590ae06268e990ba9eb5425bfc3a5bf52ef86f77b0780b0c18e7f455bd0cd52fc3dabcc7706d0d2a4413454ad6c87
SSDEEP

12288:PGw3gF3P7Jli8SVkSpUXReCJBzZz2NIg+xHHsOi05/OcasCXr:PGwkVAC8UhHB9zBg+5sfM/b4r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec4b95da10ca7c86d18f6a1cbc943173_JaffaCakes118

Files

ec4b95da10ca7c86d18f6a1cbc943173_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

madGetKey

Sections

CODE
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 702KB - Virtual size: 702KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ