General

  • Target

    ec7e01bbf8c5066970af2bae2c6cb55c_JaffaCakes118

  • Size

    4.4MB

  • MD5

    ec7e01bbf8c5066970af2bae2c6cb55c

  • SHA1

    594c6e73de0cdbc49700ed6abd1baf8a0a3331b4

  • SHA256

    241240d6eb75ab0823ce9fd4f88109117bec5755d22a5c24841ab0644c4abed4

  • SHA512

    223732c28654cabf2f45b28129834e6556a786d2029a969c8e10cf0909cf5d54282b106f696204a6273b54f5bdfd9a30caa8bcb22471b4d9a4338214b3bf0600

  • SSDEEP

    49152:4oNYstEiF2nn7ST4UQQxBfDq5Ti7URIGo7BOlZOv1osXKsiRkGyRtj1Xi8O+Q:5NYdiFA6XBfDjgRIr7gmascyrhS

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ec7e01bbf8c5066970af2bae2c6cb55c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f585dce4e5924cfee5273d7877add5a0


    Headers

    Imports

    Exports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/IRTMLOOUUDDS
  • .rsrc/0/RCDATA/JXHSCDIHRKVODMA
  • .rsrc/0/RCDATA/MEVTQO
  • .rsrc/0/RCDATA/YGGAPJK
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1033/RCDATA/CHARTABLE
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/CNVATORXFBIBOEVAB
  • .rsrc/1049/RCDATA/DHRENYM
  • .rsrc/1049/RCDATA/DNXORMTTFGVB
  • .rsrc/1049/RCDATA/GRDHRPNHLHCSOWTJ
  • .rsrc/1049/RCDATA/SMSYFCXXMACWFLCL
  • .rsrc/1049/RCDATA/YQYCENJFOIFCQGOJ
  • .text
  • .tls