eaa8d550917282dfcddfb7a2f5783d30_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eaa8d550917282dfcddfb7a2f5783d30_JaffaCakes118
Size

780KB
MD5

eaa8d550917282dfcddfb7a2f5783d30
SHA1

a13c254e4ce864cf0ada8445a2719d4e1444f840
SHA256

d8161612641a5c5ac1fe93373b35da92bdb87c44edad62aa5a4812191b623b5a
SHA512

39c3fd65712657e33ff82b5a6ac42ca656f664053e7f76d68f3908347c95f46ce2cb9031cc93d65e014a30bc06fd1b0adfaf781ea61cbabf47c7823245d88271
SSDEEP

3072:/jvop8I+YF+S+18Mwd/aujCuaa+HTNZob5y4KUxuX7FYvk5M:/jgF+W7a3uHU6y4KBX7S85

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaa8d550917282dfcddfb7a2f5783d30_JaffaCakes118

Files

eaa8d550917282dfcddfb7a2f5783d30_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 316B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 606KB - Virtual size: 606KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 8B - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ