ea718a5c562d48a0b6c7a3da6fb9dba7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea718a5c562d48a0b6c7a3da6fb9dba7_JaffaCakes118
Size

36KB
MD5

ea718a5c562d48a0b6c7a3da6fb9dba7
SHA1

e466d7a25b249008ae01cedc894e0350c9719b77
SHA256

d2f667d8873bb57a82281ac35ddce76e81a5ef0c92b768728836e81bb495f8e3
SHA512

ce5029062a4e13c7f9c5502b0267378820c46ecaae4d206b5bdd8da7b2fe8e5670bdc4095b5645e6412c4676770dfe98a5b109d836f5862dab4e7eff6d4b3e2e
SSDEEP

768:De08lyJ7rvqe6GiK0T3PzNOPwMExXXvC2O8/Wd6tZJzrWoQZ:Df08rie6ZNxPnO8NtZJX4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea718a5c562d48a0b6c7a3da6fb9dba7_JaffaCakes118

Files

ea718a5c562d48a0b6c7a3da6fb9dba7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 637KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ