ea56a00f6f206782994342922a4c2f57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea56a00f6f206782994342922a4c2f57_JaffaCakes118
Size

2.4MB
MD5

ea56a00f6f206782994342922a4c2f57
SHA1

a591c2bed8384630587f7fd2afedbda1b4d9a838
SHA256

7c1238e5f1e26cd979aad00368b842eaf50e469d862a638d4245b6766482d7ee
SHA512

a6dac6b24332b3fe0f7b890ab7c9fe6d7b0c0f44482ad0c03c07a7c4c00f89d47bdeaa8523330ab53c6df904d9f475e03f36e3669b4c10af963af524788128a9
SSDEEP

49152:0a2wY7U7u1MOxYbKIy0rVZcVU2v7A+zf9pjXg2fyQlsZ60vgpLZHFfgUNkI5:0a2wY7U0M2ARzcVUMAOf9NwClsZ5gxZv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea56a00f6f206782994342922a4c2f57_JaffaCakes118

Files

ea56a00f6f206782994342922a4c2f57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ