ea27de37e07bacce4a9245a08473f396_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea27de37e07bacce4a9245a08473f396_JaffaCakes118
Size

694KB
MD5

ea27de37e07bacce4a9245a08473f396
SHA1

a19bc5d2bca6e0bd0361dce31e02921344fbb24c
SHA256

b557c8ff98bd2b57b250ddda940bc1546ffb4f38c6104200029ab229beae2568
SHA512

0d7145eac0bf95931e1bf9afc6a559ea3837f17a41cb5bcc1b5a8546a141810a9b817b7389964769ae3422fde721a61f482bc0d89d8daf648ae9cfc1e6c3071e
SSDEEP

6144:DQffII+Qa/QkOuYn7C2oaAhEqNi5vW6GdDKVCBC7Wn4/m+hblgqUPOQZbTE1Iu1m:Eff3+Qa/QUYnqNAtGdRxn4/rQHGUE13A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea27de37e07bacce4a9245a08473f396_JaffaCakes118

Files

ea27de37e07bacce4a9245a08473f396_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 289KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ