ecc35dfbc396b695f821a010d92a94be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecc35dfbc396b695f821a010d92a94be_JaffaCakes118
Size

907KB
MD5

ecc35dfbc396b695f821a010d92a94be
SHA1

060faea2a858eb8e4db46a61b18db9ecd5873986
SHA256

bed010620ece7f8f7aaac47f40ec6a988519819b46d3b8538cb32af947ecddb8
SHA512

5befd5c3fc40f99a3e3187014f6cc88eb3ab99cdd64ea1cbe2f3044f06edf019ea70a5c51002df27c37785e4c1c6dba1de8a5babcac2dd014539756566ce3b2c
SSDEEP

12288:t3fXnQ114bUkIG3BUkAWXgmDkae1r4TecBsj1PRTowJtFm1U6Rm7tY2ioviRbWtF:t3fQw3lsWQmDo10i1jtBb59K+yUa/ZS1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecc35dfbc396b695f821a010d92a94be_JaffaCakes118

Files

ecc35dfbc396b695f821a010d92a94be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ