4b14a9a7b3ede4dc903f4c83e6fbd1de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b14a9a7b3ede4dc903f4c83e6fbd1de_JaffaCakes118
Size

919KB
MD5

4b14a9a7b3ede4dc903f4c83e6fbd1de
SHA1

7e46f65291f703b10ecb9f125b08bc5a9eb3ee5e
SHA256

c4a613695360bc4977b1c9446fd7a89778615ef9833b07dc9f4dfeff8e324bea
SHA512

8bc13fe5e43be258986ccd86f38957daf7ad35bdf11dc4d8a48a66b8d5087583d1da49e8270ffcd3183c15c567b4e8ae393a6ffe0e7ba665cbb685c2a2b4babd
SSDEEP

12288:DRpfBy+DJAu3Fwbv1tKMIOJjqgWAhOHU3+D1v/ZP7Is8c6ja4ZnMQ:L5y+Ou1wbvG/OqgWAy081ZrV6dMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b14a9a7b3ede4dc903f4c83e6fbd1de_JaffaCakes118

Files

4b14a9a7b3ede4dc903f4c83e6fbd1de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EurekaLog_PasswordRequestEvent
ExceptionManager

Sections

CODE
Size: 756KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 11KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 129B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 234B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE