ecb6d2b87d70432839a2789e483d8a9c_JaffaCakes118 | Triage

Sharing

General

Target

ecb6d2b87d70432839a2789e483d8a9c_JaffaCakes118
Size

104KB
MD5

ecb6d2b87d70432839a2789e483d8a9c
SHA1

b7752faea884f8fc2ce6a880d998d550a98cc86e
SHA256

c2be6a35714cbb157a01536c2f2d317e5b8894db52a8b04f2d34f3437ac8e6f0
SHA512

546e4c83216b07b58f6068778bbb288b3fc2d537493953a47575b1717bef3cde810643066d34575abdab1e379bc7a31b472a8f8e4c1e837d34fb5d29031601fc
SSDEEP

1536:j8zE7AYg0RXIUvlr1SGBziksfbKlwMr3KaMh55hde2OKML2lfinptH6S:qEsn6jvVzi/KyMsvlOKBfi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecb6d2b87d70432839a2789e483d8a9c_JaffaCakes118

Files

ecb6d2b87d70432839a2789e483d8a9c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE