eb2d9694231bacb7e13389724c054b5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb2d9694231bacb7e13389724c054b5e_JaffaCakes118
Size

775KB
MD5

eb2d9694231bacb7e13389724c054b5e
SHA1

f3c09a88b3d68f0a1d66ada412cf41bedc54321c
SHA256

67b48f44b86557382c914561ed6168fc850f2e74f1818087f067a12d9e7bf5d7
SHA512

a9be9aea94b6cc741c45e3d1ed1380237e635124d5d54b55c671e9d3c949991b97106ec640389471f9ced49e5d167d6e7c726e0a076f2e5b65a39a4fc0de270e
SSDEEP

12288:IPxtcdeUF6EWfvQMgkhB0OWGVz7fql9kV:nD6ZfvQMgkhnW4PSl92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb2d9694231bacb7e13389724c054b5e_JaffaCakes118

Files

eb2d9694231bacb7e13389724c054b5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.z3ybeb
Size: 1KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ixvhvc
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 3.0MB

.loader
Size: - Virtual size: 432KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 435KB - Virtual size: 436KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE