ea9cde9d870493a1bde18e519cddecc9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea9cde9d870493a1bde18e519cddecc9_JaffaCakes118
Size

2.9MB
MD5

ea9cde9d870493a1bde18e519cddecc9
SHA1

bc67df6aeeac7a6ad79914a042072664bc58c3a5
SHA256

600d0c5534cf02bbb4c265a992fb6e060450bfa026aae47c7061101a9e71776e
SHA512

4a1ec8d5a98451db34b6292f91d4232e509f51522fe23fdc4d9f4ae01bbc183a363b074cf9a41dbb897cd060a93ff6d9868c3f63383f5afb49976369a81dbee0
SSDEEP

49152:pMblIBaWnhtQcS6dAehwaY19G1u7+LISqX37OfWLyLVuoDnxGdfQkqB:CJIBaWdSHehvY19yu7+LKH7wvuNulB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea9cde9d870493a1bde18e519cddecc9_JaffaCakes118

Files

ea9cde9d870493a1bde18e519cddecc9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ