e0abf66d2da57a3d1fb627c816ebbfa3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0abf66d2da57a3d1fb627c816ebbfa3_JaffaCakes118
Size

85KB
MD5

e0abf66d2da57a3d1fb627c816ebbfa3
SHA1

e9e856556d8e347076549b3a07ff66681d3f8e1b
SHA256

b8ebe78886cae5ad38888488214728ff591fc56709211d106c3fb107ddd89cb3
SHA512

a5a21229d26d2af596960d11bbf4f01b4f5871caaffa196c3b55e1e02397a6e3f9d3ef0f83d5109f539ba2c85a461b6d0fda5de41a6279800d99c2d8e4a76ff0
SSDEEP

1536:U75PfcapWbJc/eXfHtsEeUrYTuaMGxTce5uTNhzaUasDckAYt2aQ:UVPfcaUO/ePpeG0Tceg722ckSh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0abf66d2da57a3d1fb627c816ebbfa3_JaffaCakes118

Files

e0abf66d2da57a3d1fb627c816ebbfa3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ