eb56b6f9edf889b3def5830a577bec99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb56b6f9edf889b3def5830a577bec99_JaffaCakes118
Size

93KB
MD5

eb56b6f9edf889b3def5830a577bec99
SHA1

082abe886a3c83721b510ae860b254fa6f322181
SHA256

c29ecbea48f7d9e6394c7425bb051e7c4f2337b3189b480e4cef42ca5e1fb2ee
SHA512

f86c43bacad83adef17873c4abe868cca5dff65b90ee483e336d9b98bb8378e982d259636c192bf99bc5ec9851406fb49608d8f693f262947212d87ad7d74ddc
SSDEEP

1536:+fVz0l9hHjBoDwa57Wfrhmhr6u19nr3xySa3gbxOzne/BUZKoy/wWoZss:AVz0/NjBHacord/VyR3gb+ee7yIz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb56b6f9edf889b3def5830a577bec99_JaffaCakes118

Files

eb56b6f9edf889b3def5830a577bec99_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 22KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ