ea2d83db3859e1bed82802d6f32045b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea2d83db3859e1bed82802d6f32045b2_JaffaCakes118
Size

246KB
MD5

ea2d83db3859e1bed82802d6f32045b2
SHA1

42f079a2f5ffc55b28198f3ac49d02d75a1adfac
SHA256

b0b61bbcea196f30b2c53365cb1b94813bf4f6ef91ec3bcc0fa87cfac433b7a0
SHA512

eed1b79e700fbf3ad8f8d8538205bdf1746157714fb3be25d0e39c76abd7f255b8b88f004883666b62f40ba50ce023a61ec76c4fed6106cd9b29fdd0c5fa5ae9
SSDEEP

3072:r5EQ7EF4MGRU1qvv7meN51F3+gqxSL1y5IVvBsyNUBVLF5SS318RTNC:etF4M2UIKeN5rqxSTvBsyqBVJISGK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea2d83db3859e1bed82802d6f32045b2_JaffaCakes118

Files

ea2d83db3859e1bed82802d6f32045b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ