eac58b2eaa89beb2dc0064a220afa4a8_JaffaCakes118 | Triage

Sharing

General

Target

eac58b2eaa89beb2dc0064a220afa4a8_JaffaCakes118
Size

198KB
MD5

eac58b2eaa89beb2dc0064a220afa4a8
SHA1

196b79eb46f251647d7b87402cd3e5cc29bc31ad
SHA256

8511813580d36c798601f11786874202fba4a57677f6dd5049ef5ae61ae6ef2e
SHA512

aa697f0e8f1c44429d6473a66b3903bfcee78d956c65a90901698723bf5afa655605c7c0f26985aeafe227345b61f90673579f950e48587d4e6a7cd768d7f4dd
SSDEEP

3072:YrBmh/F9plLCq8qpi0iOQpt69HPciKGysbS2yFyWC4wgOGKhrP4NHV:YK/F9pZPRAFOM2PcMbBywgONAHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eac58b2eaa89beb2dc0064a220afa4a8_JaffaCakes118

Files

eac58b2eaa89beb2dc0064a220afa4a8_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

wmpenc.pdb

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rol
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE