eb59d3564b9ded0a43173f27236a8339_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb59d3564b9ded0a43173f27236a8339_JaffaCakes118
Size

456KB
MD5

eb59d3564b9ded0a43173f27236a8339
SHA1

78e64d25c38bc7b5cc80fdbdac0ac600c21b7e4c
SHA256

17d44686a17cc110679043aeaaa3efe57c0fe6befa7733b9ac4905aa2b0cc352
SHA512

be620c1bf34c0a5e60068e0610d900e9e460f6dbc06e94a3d8a4a542ab0110613b2c30fc750a5ff1310ed5b44a5f081fc16e1296128c8d0b933af30e42e2b175
SSDEEP

12288:jEVXKpmokMif4JgTIoq43H2cE05nMx11DGkfb7i:jEtRUiAJgMe3H2cJCx1YOb7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb59d3564b9ded0a43173f27236a8339_JaffaCakes118

Files

eb59d3564b9ded0a43173f27236a8339_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ