ec6dc68d3647ee5c951224f2909c614b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec6dc68d3647ee5c951224f2909c614b_JaffaCakes118
Size

905KB
MD5

ec6dc68d3647ee5c951224f2909c614b
SHA1

5bbfe6b80030aa2753494e926cbe0c433441d6ed
SHA256

0edaeee8f93a9fcf922ddce1da6d5c5b596287ec6c405732c202cb61deed0377
SHA512

38c815d641142af18888e8e936b00e28cdcdfc92d7edd399c4d35743a44f7d10bd070ec7be3aaa42e670e917962a09871a6f6e6d9fdb54017f8219b24db32015
SSDEEP

12288:ZiT97/VGhsGvw1K1fKIKvLnBCq75vgXZZ/FXvRDuQT1sewgMZ:wpqsGvwSftKDb5vgXZZZR5BU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec6dc68d3647ee5c951224f2909c614b_JaffaCakes118

Files

ec6dc68d3647ee5c951224f2909c614b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ