b2d4c8b7ed48f43924fb4c9653d3cd9e_JaffaCakes118

General

Target

b2d4c8b7ed48f43924fb4c9653d3cd9e_JaffaCakes118
Size

2.6MB
MD5

b2d4c8b7ed48f43924fb4c9653d3cd9e
SHA1

7ec266ba19a46d202a3986e951f2552bb28ca2d9
SHA256

1b6d70ecd5ab160d468ac36e1d68a52422264d78dcd3c8bcf618a0a6c47de6db
SHA512

aff1d8aeed1a6d244db0434e145a69978ae5e9715eb0371979d0068efb1c3090305c770d4c62cdb2c599af1725d39892c5d4a48294cd1e985531ea3a1ba4f293
SSDEEP

49152:1d1WR4fvWiuiyJAXncDR9inrP22AWORibXy3y7C6A8Nq1g6wJMGr:H84Giu7A3cOnK2/LiiW60daMGr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2d4c8b7ed48f43924fb4c9653d3cd9e_JaffaCakes118

Files

b2d4c8b7ed48f43924fb4c9653d3cd9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

CallEurekaLog
EurekaLog_AttachedFilesRequestEvent
EurekaLog_CallCreateThread
EurekaLog_CallExceptObject
EurekaLog_CallExitThread
EurekaLog_CallGeneralRaise
EurekaLog_CallResumeThread
EurekaLog_CustomButtonClickEvent
EurekaLog_CustomDataRequestEventEx
EurekaLog_CustomWebFieldsRequestEvent
EurekaLog_ExceptionActionNotifyEvent
EurekaLog_ExceptionErrorNotifyEvent
EurekaLog_ExceptionNotifyEvent
EurekaLog_HandledExceptionNotifyEvent
EurekaLog_PasswordRequestEvent
EurekaLog_PasswordRequestEventEx
ExceptionManager

Sections

.textbss
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 740B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Exports

Exports

Sections

.textbss Size: - Virtual size: 9.8MB

.text Size: 3KB - Virtual size: 4KB

.data Size: 1.7MB - Virtual size: 1.7MB

.idata Size: 5KB - Virtual size: 8KB

.edata Size: 740B - Virtual size: 4KB

.tls Size: 24B - Virtual size: 4KB

.rsrc Size: 3.0MB - Virtual size: 3.0MB

.textbss
Size: - Virtual size: 9.8MB

.text
Size: 3KB - Virtual size: 4KB

.data
Size: 1.7MB - Virtual size: 1.7MB

.idata
Size: 5KB - Virtual size: 8KB

.edata
Size: 740B - Virtual size: 4KB

.tls
Size: 24B - Virtual size: 4KB

.rsrc
Size: 3.0MB - Virtual size: 3.0MB