e9ce58775084d82890ee803835f8c672_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9ce58775084d82890ee803835f8c672_JaffaCakes118
Size

17.4MB
MD5

e9ce58775084d82890ee803835f8c672
SHA1

13691dc3efd736e37180f993872d03af2b79b702
SHA256

57794bf1b262ce5db51bb77094a1169981259b2b9105cc446abfdf04143ae8f7
SHA512

ce7c071e448a9ee2a1d7b4047e26a6125a991d6b7445ffe20e55df2b226dd50adfee551b7f724556aad50fc39264c4bacc066ce44263fd613d577142ee6146da
SSDEEP

393216:q5FoJhF1/HrWLULGYVeoXEZ7Bs3PcLJFuQCfaxlnAhJ579MG:q5GzDWWGY/XcfylIA579

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9ce58775084d82890ee803835f8c672_JaffaCakes118

Files

e9ce58775084d82890ee803835f8c672_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wextract.pdb

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17.2MB - Virtual size: 17.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE