ea5ffb8d3916d3dc5281e734aefc260c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea5ffb8d3916d3dc5281e734aefc260c_JaffaCakes118
Size

493KB
MD5

ea5ffb8d3916d3dc5281e734aefc260c
SHA1

7db5cc7b9dd64602efa5583ef70bce593c1c2e5e
SHA256

34b21ed5fa4498c72dec8d4b93213d74850a30f30241681579c9975097a8a05a
SHA512

79720af654fc9d7443e7170a0782773a728675bc370704f682049cdfa26bf7282b6efb2c46733c1bd4ed4405300a716723dd98b89b46e13ddc67a88d87133f1f
SSDEEP

6144:QuCIbtrgA4OFsZ4DzxEjjdA2UjtEQvIIP6dL1grNvGJxAfEZMaDQD8pVXJfij:QpOFsZGxE3dzURtPGgAJx7+gQopV+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea5ffb8d3916d3dc5281e734aefc260c_JaffaCakes118

Files

ea5ffb8d3916d3dc5281e734aefc260c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

x:\v1.1.2 (Vista)\GeneVisual\Bin\RunHttpCfg.pdb

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yvs
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE