ec86be6e19b23802bf970b6463f5fb08_JaffaCakes118 | Triage

Sharing

General

Target

ec86be6e19b23802bf970b6463f5fb08_JaffaCakes118
Size

907KB
MD5

ec86be6e19b23802bf970b6463f5fb08
SHA1

da8e45660cca07b4ff6e4231c9bb9440fb572d25
SHA256

fe53797a144383867e438982504fb084f46098a8457dd0abae034b146368b5e2
SHA512

fbeef85ae22ceefe879f1784ea9c5fba34c85c3794aea3a056f9b9bfb5e075f8b8b27d57ca9b56f4ac844f0208f058ed09a831735a72a43d42059eff8493c0d7
SSDEEP

24576:sJqp4AXe7rCzPK1G65CYyuwYoecgm+3ca/ZS1:yqpFXe7rCzC1GCCPu9RRcgS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec86be6e19b23802bf970b6463f5fb08_JaffaCakes118

Files

ec86be6e19b23802bf970b6463f5fb08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ