e0d9dbbcf00e275946fa3d92fed6de4b_JaffaCakes118 | Triage

Sharing

General

Target

e0d9dbbcf00e275946fa3d92fed6de4b_JaffaCakes118
Size

16.5MB
MD5

e0d9dbbcf00e275946fa3d92fed6de4b
SHA1

b4deabf10fa492f36669d9d19581d689a7035cef
SHA256

8d831ba273105dd8fdf8da7afe5a6256c0eed7b6c788b10c773f3c7951b2e020
SHA512

d86b959ae9e77e538ccb3c6af9588c50ab2b09d84369a0e95a644e49dab19c822e54c87e750a54c3edd7a16ed72d958242dbb633cf9d4f3b4ab1e5c3a9b45ed9
SSDEEP

393216:gjANs2uLsha1j5ndewJFzKXd1JrfF/bPKCcEVCwK3eM5Tti9FquxpA:gjAq2ZS5ndewJFK1JDVKjD3eM25DA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0d9dbbcf00e275946fa3d92fed6de4b_JaffaCakes118

Files

e0d9dbbcf00e275946fa3d92fed6de4b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ