8ebacd7d6c3dd05a8339f3b64beae26f_JaffaCakes118 | Triage

Sharing

General

Target

8ebacd7d6c3dd05a8339f3b64beae26f_JaffaCakes118
Size

1.1MB
MD5

8ebacd7d6c3dd05a8339f3b64beae26f
SHA1

d98cf133a498a79d9d75e8e236455042fb5ebd81
SHA256

656831a80ba83a794b7c7bb830d365a18037fc426eee4834030608e859484cd1
SHA512

a7c6434a16b98ca26f3df4c690203f5095183912f44a82d6e2f5f431e4486c020a4a81158ee9706c402cb34a7e2730fef84aabca906db53d6b3928190166e717
SSDEEP

24576:xaZnpuWE8CEnvC6fdZm8LfMHLOL4dL5RTReHz1lzRL0QlTxE9r16:4puW1VvZZmSfMHy65RTRmOQGa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ebacd7d6c3dd05a8339f3b64beae26f_JaffaCakes118

Files

8ebacd7d6c3dd05a8339f3b64beae26f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 357KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.net0
Size: - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.net1
Size: 10.0MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ