ea5955990670ada9b6f03e7b11aa332b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea5955990670ada9b6f03e7b11aa332b_JaffaCakes118
Size

82KB
MD5

ea5955990670ada9b6f03e7b11aa332b
SHA1

67891bb4cbd71f937d546d57c77ecb7503e263e1
SHA256

9a33341ad9af14484de5779ea34fba1c05261c9336b69281a6a9f60966f2bcec
SHA512

f05307de2880d77ca09c180d07faa1c6d132394162312d6cf28936f27924c185ccca46a22a0300ec103c7b2e5d7054b3114dad9e2a10f66a9c3ead4a2ef3dd0e
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzQ8+w2a/cPo:lV2BZVPlFlnxClFvLLcA+sPDzQG9/cg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea5955990670ada9b6f03e7b11aa332b_JaffaCakes118

Files

ea5955990670ada9b6f03e7b11aa332b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ