e09bd672dab2117e52b4aa8c5e74f5c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e09bd672dab2117e52b4aa8c5e74f5c1_JaffaCakes118
Size

1.6MB
MD5

e09bd672dab2117e52b4aa8c5e74f5c1
SHA1

e2e4b5653c22f6f9cf060d3cef5a9cddeec0761d
SHA256

5b261928c3d8b76455f8fe27909287892b38aadbec9f04079b9cae6c9daf9cda
SHA512

17aecca7d30f0acc953b952d7f851204a0e5be5284b58b4f656ad727d45ae498fb0180d201432f3945814b49c8fb8cfc0bcf8c332850c6bce46b54cc7ad6414f
SSDEEP

24576:Pgi7+dNmEb0Ksnus8s/EWZ0G/sFhbQoY542VNCH42DxRM1h:1/Rus8sMu0jbQA2VC3VIh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e09bd672dab2117e52b4aa8c5e74f5c1_JaffaCakes118

Files

e09bd672dab2117e52b4aa8c5e74f5c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ecode
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.main
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stub
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE