e1ebcc25a15c4843b8362f5e039f526f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1ebcc25a15c4843b8362f5e039f526f_JaffaCakes118
Size

1.5MB
MD5

e1ebcc25a15c4843b8362f5e039f526f
SHA1

706a9d3772d6619735dd7431571cafc19736eaf0
SHA256

b974a5c77c0024768de7c527000c76622f97ba014733bb846b6cd39c4ac9d860
SHA512

9adcc7bbb8c9e864560b181f0c936f3002648b09d63903ea3a034b1fef0d07a9c873bf688582f965ed3d5aaf92fefbce733997476e91332b6e3383aa6c1a5ecc
SSDEEP

24576:l2Uosx7KMBWchT27g2hqFXLPFVcaEk3tyLein4to871VZ8Q+veBEoOMM6r:l2Ix9Bj27xQFXxKaTtyL4K8J0Q+ve+ML

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1ebcc25a15c4843b8362f5e039f526f_JaffaCakes118

Files

e1ebcc25a15c4843b8362f5e039f526f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ