ec772e3d12c03a490481f8683905703d_JaffaCakes118 | Triage

Sharing

General

Target

ec772e3d12c03a490481f8683905703d_JaffaCakes118
Size

385KB
MD5

ec772e3d12c03a490481f8683905703d
SHA1

b2c54cff054eaa0b4735609d02a7e4d168fb4385
SHA256

457c8cb330efbb8a462697c96f275f7231b677cd6c97a466563511b25821e048
SHA512

d10190f632b1bd36b2970bd5a54ea569d3f3f67d5852fbaff12c26a15720806d38fefb0ce2d79faff873f07951794d50d1458119f765a72e83f3502ef1918e39
SSDEEP

12288:hDiMoUppJ0lgNy2ro4cFC63XEKHuni/7B:BgUnJhk2KFCwEKHuiTB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec772e3d12c03a490481f8683905703d_JaffaCakes118

Files

ec772e3d12c03a490481f8683905703d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ