eb053c08fbf5baec9c20cdbbfbc75ddf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb053c08fbf5baec9c20cdbbfbc75ddf_JaffaCakes118
Size

1.3MB
MD5

eb053c08fbf5baec9c20cdbbfbc75ddf
SHA1

905921ee5e618275fbd7c494257fbeb3f14c8c87
SHA256

ea026ed996b5609ef63112a052876d602e3e14fec5e85818e6564afbd4d09b4e
SHA512

1b085bacdd772828984c68544f7add2ea134c79f03c551a30a0675b73e5c7d67823b076db0ac61ef57b6477efb42fce2b04925d14bc98e07a8afc72344d58de2
SSDEEP

24576:DuXs6j7vNDAq7HxEVqbFR9A7aCohtypxHE4sL+xsQepCavJHcGKZ:DeFcq7HxEIb/HypxHE4sL+xsQepCav2F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb053c08fbf5baec9c20cdbbfbc75ddf_JaffaCakes118

Files

eb053c08fbf5baec9c20cdbbfbc75ddf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ