ea943c65a8a2d8a01fd9cccdf7e78748_JaffaCakes118 | Triage

Sharing

General

Target

ea943c65a8a2d8a01fd9cccdf7e78748_JaffaCakes118
Size

1.0MB
MD5

ea943c65a8a2d8a01fd9cccdf7e78748
SHA1

d0196d5c6de3501adeb554c6a1a67e199b3686f4
SHA256

6b54f0f9406ada4f7179b054f68365efa68537b4d42e34462bcd62589a10dd35
SHA512

2050d3ad79670fa11a1a4407dae198f6d8d64320c3d67b763a2c6aa145e63a0a3e645cf8ec1e20c50982d2de7f7a8462e2a77bfdf683ffa7c5fe57d21858472f
SSDEEP

24576:1HwRBC2HakPrmBG2bhAS7BEDgYRTD2CxCQ1v:iRALermB5tPEpTiCxCQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea943c65a8a2d8a01fd9cccdf7e78748_JaffaCakes118

Files

ea943c65a8a2d8a01fd9cccdf7e78748_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 786KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ