eca398f08ba640a4efccd003ea00c0d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eca398f08ba640a4efccd003ea00c0d5_JaffaCakes118
Size

385KB
MD5

eca398f08ba640a4efccd003ea00c0d5
SHA1

d99cb09cfaaf9e308055ea48d1911dc5ef2b2b8e
SHA256

040b266d7de46537336df335341e8e4100bf0754bc3e7d83ebd785312d2a3545
SHA512

3f97077b214b92bff2ac719007ca55ee57e643d2000623c386a0f6492f319ef291bf5e33d9e62abeec030586b67cc896ed06245cc22dacd1cccc29287e7faa4d
SSDEEP

12288:Fu0MNYsCCSWbi9TQc/UnxBZN2VCqWtGcB:hMNYsCbhv/cxB++tGcB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eca398f08ba640a4efccd003ea00c0d5_JaffaCakes118

Files

eca398f08ba640a4efccd003ea00c0d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ