ea6d4c9c24fda584c85957b13a40c6c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea6d4c9c24fda584c85957b13a40c6c9_JaffaCakes118
Size

10KB
MD5

ea6d4c9c24fda584c85957b13a40c6c9
SHA1

4f7a14db6ea02fbaa9b38d39be2729e272736d0c
SHA256

6df6f07d5a3dc8ec9ab31c2673da9ceeb107bb858f42aeb38c8a329d2f0017d7
SHA512

33eb74302875d03c0e71f092bcd7637cae9254246a85ca6bcb5df8f84d40f8ea27d6744144547533f392ac83d6c078cd8aaad63d76df51e58b65e9c409360b46
SSDEEP

192:uFJ1ZKaBWgIoeY07yo24db7ttF7E66Zj82fK3AqQKbQIJZdFu:uFQ7VM0RTh7tTpQI2EQKbQiM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea6d4c9c24fda584c85957b13a40c6c9_JaffaCakes118

Files

ea6d4c9c24fda584c85957b13a40c6c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ