e1c78032bad43eddd43576d98c3d6070_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1c78032bad43eddd43576d98c3d6070_JaffaCakes118
Size

817KB
MD5

e1c78032bad43eddd43576d98c3d6070
SHA1

4f29fd18b7be60f4da70f385dbfd6d1f3b918378
SHA256

8bf9cc2dc8fa4ef419f02d8aabc1afb19e3970b5175aecf491ec61322f57df56
SHA512

d56d5ed7ef20c8a01d9d26ad521528e041cbdf8415a9c17813660633e28341edd0e4e8a9a8880537bfe75103c3c1288e31ebd6ed658686036efe11168798e241
SSDEEP

12288:CTaMnZdlnFZqwnL+qrqNe+gbIPU6J/f2kRagbNYv4DVG7u1gkzLeg5Vx:maMTlFUwLrT/0PUsOSVNYYiuOyl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1c78032bad43eddd43576d98c3d6070_JaffaCakes118

Files

e1c78032bad43eddd43576d98c3d6070_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 732KB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 74KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE