011ebfc8c84a1ef428e5d7a8c7ce82ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

011ebfc8c84a1ef428e5d7a8c7ce82ee_JaffaCakes118
Size

271KB
MD5

011ebfc8c84a1ef428e5d7a8c7ce82ee
SHA1

305d4daa48e8e78695becc01f678f35e4bf9541d
SHA256

0cdd0ce91805ef8866dcc9196ab438b654913cf61ddc9261d79e580713b43639
SHA512

45a94d8a435fed834e352b81cb8cf4b326634315345f760631766ea266bec07ee8b27084464b718fb934241d7ab77794c4dff7be3747bc18829d1ed265adb4c3
SSDEEP

3072:10qB5nXFiyZS9X1KOlmS2ul/xTmyfM4SghHMZZxEYRdPiGEZUV22SAx+Pj79bsVa:HBlXFiyM932w/0+o2ZUV29p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
011ebfc8c84a1ef428e5d7a8c7ce82ee_JaffaCakes118

Files

011ebfc8c84a1ef428e5d7a8c7ce82ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ