ecf9985b878335f01a2c58b60d8d3bc4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecf9985b878335f01a2c58b60d8d3bc4_JaffaCakes118
Size

314KB
MD5

ecf9985b878335f01a2c58b60d8d3bc4
SHA1

7a17675e526587445f68e8ce1eba14b2c2c80314
SHA256

e290c7b7a52ee9e7ab2ed5c38b359db7dfe9202b5a8d8bc0fb9680ea64c328c8
SHA512

8680b64e972e4a989b6e69cb54bfa754028bf248a58d9d5eacb7fea067749abecd4268df7a661b6114ead895ea9a20b0af2cbdb74f0f8a5bf8dfc5716d195e98
SSDEEP

6144:Zg6ygE/BBIp/E5DCbMeFcMKrgGcC8uomqFMVnKLOgNgueQFF:Ty/mMFcPFcr8ZKCpgueuF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecf9985b878335f01a2c58b60d8d3bc4_JaffaCakes118

Files

ecf9985b878335f01a2c58b60d8d3bc4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.data
Size: - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hacksa
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rsrr
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE