ecdb8e330d860fb2630e13f8b9a3ba0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecdb8e330d860fb2630e13f8b9a3ba0a_JaffaCakes118
Size

524KB
MD5

ecdb8e330d860fb2630e13f8b9a3ba0a
SHA1

16e17713d0fc044ef2f281e9fa2bd7ddd831d1e9
SHA256

490f95e4508026342e910ff4868ba3c487a7b4c5c8ecb1dcb620c04147413a9f
SHA512

b128fbeb30e69b266302fdae15de7e9660349d95be36bb2cee25d786aeb8d4bfcc680b1ea55b9a7393f0a5b87e87921670ad2dc8212e227a982b097b47a64b5b
SSDEEP

12288:EL1V+Qk3m7/+yKdfFHygaHMfKjjbfWKkaS8:Exk072yShqHMfGTHxz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecdb8e330d860fb2630e13f8b9a3ba0a_JaffaCakes118

Files

ecdb8e330d860fb2630e13f8b9a3ba0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ