ea0303fc70a40409e698012a838c8126_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea0303fc70a40409e698012a838c8126_JaffaCakes118
Size

208KB
MD5

ea0303fc70a40409e698012a838c8126
SHA1

ff1bfc3cd3c62f5813708861d92412376f88b829
SHA256

266f1ac249b1c19d3e7da431f60c5e4ab91246ecf61c5f1d6528a279fcc281bb
SHA512

c5cc8c8005cd2f4f43011d1fcd63ae7d3b9ee5561753f6109c3b827be8e7068b9a2b01111e03f44353b097a64d359f90dd9b67b1c5a40c2f08f35cb174289d6c
SSDEEP

1536:5VQNIgCcnihxGltbwYLU9KD02BBA2KmaPoYkwAyd:5VHgCc4xGvbwcU9KQ2BBAHmaPxB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea0303fc70a40409e698012a838c8126_JaffaCakes118

Files

ea0303fc70a40409e698012a838c8126_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zzfclry
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE