e014fcf769092f5daaed12e1dd76e17b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e014fcf769092f5daaed12e1dd76e17b_JaffaCakes118
Size

396KB
MD5

e014fcf769092f5daaed12e1dd76e17b
SHA1

c4f2d065d5d97b3e0cc8d4fc34567f312a291b38
SHA256

e98f5b57a64bf9e466f30e32a19baedb14ad5bd2ba0e10aa7c5fe032e7a81570
SHA512

25f6d693c7e882c1d0ae1cc5cc102399993ce16bce1b20a9344e87f092f728fc647b41946f2f4a81f860f7b4a663caa49e205449d25ae6c3ed8afab781b5be9c
SSDEEP

12288:RBuFVU9y3RY6/C5V2Ve7Ec5gmn2XUfQUK:TcVU2RY6/C+VPkeUu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e014fcf769092f5daaed12e1dd76e17b_JaffaCakes118

Files

e014fcf769092f5daaed12e1dd76e17b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 305KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ