ea967cc46f9b5e4cb5114bb3016a29df_JaffaCakes118 | Triage

Sharing

General

Target

ea967cc46f9b5e4cb5114bb3016a29df_JaffaCakes118
Size

43KB
MD5

ea967cc46f9b5e4cb5114bb3016a29df
SHA1

c3b2545258444c212c5d3ac48de45ab75b8c3aaf
SHA256

4244431593832c1b0318952f8d77893f970d82f0bc3a8878be4d8ab071348555
SHA512

48d19b6ec1fe7562a023d6334793f37045a737e2cfb436fab89404a07891e4513d9b6971248a7f4535d1ea25facf1b579600d154421de1dcd2b56e981fcd0cc4
SSDEEP

768:RUsW0cxc2iQ3kU+Rfm+ND7t4mdG6psludzmIfr6i/:OIdjRe+V7tcksluBmQ/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea967cc46f9b5e4cb5114bb3016a29df_JaffaCakes118

Files

ea967cc46f9b5e4cb5114bb3016a29df_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9.1MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ