e05fc9e7d2b503999ea64eaa4abb6697_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e05fc9e7d2b503999ea64eaa4abb6697_JaffaCakes118
Size

2.9MB
MD5

e05fc9e7d2b503999ea64eaa4abb6697
SHA1

9578715214f43614bf4c7145c49906c5d879fca8
SHA256

a39f44aa22df8207e465c143e1493ef6884dbc9a4f913aa067a3f2a7434734b0
SHA512

19786606b54c5fc9550de8c192b7e99a85ba38adbc209b309d5161fdcbf9df1304d4787ab7bed93cec4a59a9b288cb951b752d112d9f3b3360ef6ed4c7518e7a
SSDEEP

49152:OXHWl+MYl6fhVeZk6FcivYPpSYtykRwBzoC6hVODSZLdrmNN0jlv9Ix1bP/:0w+Qbe/24fkqzD6Z52N0jxAn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e05fc9e7d2b503999ea64eaa4abb6697_JaffaCakes118

Files

e05fc9e7d2b503999ea64eaa4abb6697_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 356KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ