ea54cd058294320e229255de2f45ae93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea54cd058294320e229255de2f45ae93_JaffaCakes118
Size

6.0MB
MD5

ea54cd058294320e229255de2f45ae93
SHA1

cef3323ab290c4bcc0df3e8370d872cb9e7212ac
SHA256

96beee12bbcba2967c150fa4c401d0f421d7927d40b4dca7577f9bae95eab4b3
SHA512

bc9167d918c2943844b5401de2ef69218da3aa6e01fbfa8671f9c1ba33283aaf45e09ac0c877e5962ad619ea9b7347fa5cd75b81cf41d68e06c72ca3d47c8c41
SSDEEP

98304:04MH2EiICsDUWrCPGobIaLHQzQUq25/0Ko:0b21LZ6CPGobIUyub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea54cd058294320e229255de2f45ae93_JaffaCakes118

Files

ea54cd058294320e229255de2f45ae93_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 242KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ