ec90d675741ab2a3ea53e842c5d954e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec90d675741ab2a3ea53e842c5d954e9_JaffaCakes118
Size

747KB
MD5

ec90d675741ab2a3ea53e842c5d954e9
SHA1

fae5672aa9a9b4d55aae5eb29578841e894dca66
SHA256

0a89bd99838f14a03e5b045c6fab43f48be3767f7098e8efa21b9487dfd40e16
SHA512

34e3f8497d36775fa699da81c25c10285961b86776f049f84bc672600f78542c5b516216898156df7972e0ddaaa7b541ebd515e960cdafcc8885b22756a9f1d9
SSDEEP

12288:coCuX31tvrf6q7HWwN9qg2GS6RxXAr1/1K6941mKGKdb9Q260jLry:cbuvrf6q7Bb5dk1tFsmKGKdb/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec90d675741ab2a3ea53e842c5d954e9_JaffaCakes118

Files

ec90d675741ab2a3ea53e842c5d954e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 559KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ