ecb67e5dd69f9c3d80857f000d4af33a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecb67e5dd69f9c3d80857f000d4af33a_JaffaCakes118
Size

540KB
MD5

ecb67e5dd69f9c3d80857f000d4af33a
SHA1

049aac00c1bbd66ee8d2402dd9189a7ed46e1431
SHA256

5bae0bf30b3366397acbe295b232f690201736dcb556c4dd0a3245d44e872f7c
SHA512

c5e2f230d9c9ddc2498e2d194606e7acf86f2dc6ef0a551cd7a16dd9cd619d2e5782e6090070233506c022933b038ae745bbe4d1e29a7083ecc7e2a3660ef7a4
SSDEEP

12288:81o33g45MgaUi1MdsCc0N9kDJ+f+aRFMd1Rq:8u4JPB0k0WEi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecb67e5dd69f9c3d80857f000d4af33a_JaffaCakes118

Files

ecb67e5dd69f9c3d80857f000d4af33a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 16.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ