ea8458fa63480f016e6dc607bd3ce3fc_JaffaCakes118 | Triage

Sharing

General

Target

ea8458fa63480f016e6dc607bd3ce3fc_JaffaCakes118
Size

21KB
MD5

ea8458fa63480f016e6dc607bd3ce3fc
SHA1

202c673a2bc762a48e17911076af10ceacf11e55
SHA256

300c9e5f0d55b76b5c44d51c6e08e23399c35b2ffad9a044c82cac070a74d7bc
SHA512

fbd35dc8c3e8f315da8dbb228f3338a18d522248f5e5f1503db07fd056c8325281d6fa3dce3b372562b82f7d868a3945feeae5af3714b7040b5cf83e8e5adae3
SSDEEP

384:DOaiut9rB1aKRrHh6YM/xdYyfueL++ddNw5CGIVv6RS+Ed1hW39TlK:DHiu/rltHhpEXYt+dd63RwL6TlK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea8458fa63480f016e6dc607bd3ce3fc_JaffaCakes118

Files

ea8458fa63480f016e6dc607bd3ce3fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

XJ
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE