e8b1b4afc6ea42f7b8973f5498ad548a_JaffaCakes118 | Triage

Sharing

General

Target

e8b1b4afc6ea42f7b8973f5498ad548a_JaffaCakes118
Size

645KB
MD5

e8b1b4afc6ea42f7b8973f5498ad548a
SHA1

dbeb35f6e14859d5009e9b7c6c1ee61099170766
SHA256

9dcc417585e00375d96009b5ee6036f508e5807212cb85d8587bdca6dde44b3b
SHA512

f6db4f79b610c279ef95fc05c0ba512fc305d341333ce02b442548bc571430497c7dc59460b0caf5429650532ca0d9fa22efc2515dc14d141093d0327d91d1ad
SSDEEP

12288:WeeCcrLlC57xaCkvVsWkKnG7EmJQqbTFBFgWzHMXQ0l4jq+BmJG45mbJJvH2:Wezc2rPWnG4fq9BFrWEqh5sJvH2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8b1b4afc6ea42f7b8973f5498ad548a_JaffaCakes118

Files

e8b1b4afc6ea42f7b8973f5498ad548a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 5KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 587KB - Virtual size: 588KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ