e9ea029f2a3d4dd903c8320002c9edd1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9ea029f2a3d4dd903c8320002c9edd1_JaffaCakes118
Size

370KB
MD5

e9ea029f2a3d4dd903c8320002c9edd1
SHA1

7d974e80b62b7f850dcb6d96793675399e5fa3be
SHA256

a38d2ff73a646f643bde7d6719f61b35e6f3300cfae263aea0956966a214c562
SHA512

d25cb5563cfb240a27e049f149dcef6597da699a26c1fea226c6a7fbb8e485a9753bf20601ea2f9b646ff7eedcafc9630f55e8a92e619d53f9f283c713b8dc11
SSDEEP

6144:ZW1F8YnKx0RbsBuUfOTfyBCZVcG+t9cKc/HGa89EqAZsEElc:Zy8MKx0Rbs6ZVV+t+OaAEqWlKc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9ea029f2a3d4dd903c8320002c9edd1_JaffaCakes118

Files

e9ea029f2a3d4dd903c8320002c9edd1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ