e0e5fca4665d9c625d9deb2642b997a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0e5fca4665d9c625d9deb2642b997a7_JaffaCakes118
Size

4.8MB
MD5

e0e5fca4665d9c625d9deb2642b997a7
SHA1

1eaae180369a143a94197b2845ba47b829a98837
SHA256

22e73738608a305d00df547bcccfd4c476ac64e1ab014014a26ee9d55a01916e
SHA512

82ac9fe11f50682009bb4015c08e75860ac391e900307aeb1f88f709c2ae8925f72a1e7447a4acd478c29a44f93714eb4b6a02a9a2cdd9c13402c5ec87f5d902
SSDEEP

98304:pNOmuZJUfkprmPZm11U8fenVn3QRMZIj89bRLFB8O+IzGJp:pNAs4rmP00XVnA+ZIjuRBF1zop

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0e5fca4665d9c625d9deb2642b997a7_JaffaCakes118

Files

e0e5fca4665d9c625d9deb2642b997a7_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

9t,-M7#L
Size: - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

?v^t]$dz
Size: - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

*dee\d0'
Size: - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

i#:\h&E$
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

NKD^Pm$C
Size: - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

mdD$sgF%
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

:\;Fc'Je
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

$G!D345Q
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ