ecf7bdd10c486ea64ec3da810feeb0fd_JaffaCakes118 | Triage

Sharing

General

Target

ecf7bdd10c486ea64ec3da810feeb0fd_JaffaCakes118
Size

1.8MB
MD5

ecf7bdd10c486ea64ec3da810feeb0fd
SHA1

a8cfe84fd9c6e85cea290018d2b2ff72b7c54e6d
SHA256

5b569a040aef5d4ba6c109a4ef2f225e24d7a8ccc71b4d9c22c9c927d09a815e
SHA512

c9a73d188711361a89d1ad11be56b489dd831990442ae8644e643d0eac461832e5a1c0824544a56a3492179964933de3b24370ddc9c9c7c8947c8edff8bb6a44
SSDEEP

49152:iIGTiSJWDB7AmgbZLyGTQSBKlXvebO5wQQ40SsSU:iRXJWJlABKbDsSU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecf7bdd10c486ea64ec3da810feeb0fd_JaffaCakes118

Files

ecf7bdd10c486ea64ec3da810feeb0fd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1006KB - Virtual size: 1006KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 476KB - Virtual size: 475KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.lif
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE