eb63750f80f808f4c988e8b1572f3550_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb63750f80f808f4c988e8b1572f3550_JaffaCakes118
Size

1.0MB
MD5

eb63750f80f808f4c988e8b1572f3550
SHA1

ae9c001cdc2008553cedaac13b964913db5b2e21
SHA256

5a57a7b94ee0367b83d34a7c5c7d8e52e8473925a1f826741c7647a3b77f7af2
SHA512

78b843a144eb1952f881c898bd59db43b047984a672ebc926ff9bcfeb2a585d6c73e04a882e7e80e634cc9c2ed89ca90659893147baf1e0ecd49bbade9888ffb
SSDEEP

24576:wk4GkHnW/AQDmrpn7cwpPuH7PJxPHGnAtDQj:jzchQxPdt+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb63750f80f808f4c988e8b1572f3550_JaffaCakes118

Files

eb63750f80f808f4c988e8b1572f3550_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 33KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ