e02b5a3b6b83d95a3a6b808e4f31ad96_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e02b5a3b6b83d95a3a6b808e4f31ad96_JaffaCakes118
Size

1.5MB
MD5

e02b5a3b6b83d95a3a6b808e4f31ad96
SHA1

decc8941025af52fc8489ecd19b48d15f8fce761
SHA256

eb547faca9e1f313b738c3ef0d453658f76df27cf23da86e1a25cca25e65e16d
SHA512

cc2010a7d9c44bc1b64dce9adf757b24fea7db852e9022ca9513804145585a5e72905c7239f69bdbf5ce9194c863e321742256798c564fc30a49cc3285746283
SSDEEP

49152:nQr/TMsXahmk1N1dbTHGZbFCEN9/c54SVl:nO6hmQaFCEPI4gl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e02b5a3b6b83d95a3a6b808e4f31ad96_JaffaCakes118

Files

e02b5a3b6b83d95a3a6b808e4f31ad96_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 903KB - Virtual size: 903KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 555KB - Virtual size: 555KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ