eb65133d78f4237605edade9c3f93209_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb65133d78f4237605edade9c3f93209_JaffaCakes118
Size

1.3MB
MD5

eb65133d78f4237605edade9c3f93209
SHA1

a116b2662d5ad9cfbf0986a1e4e2026bab0fb62d
SHA256

3e7453181bf0e18918aff8199fff5757853decd859815c3cabf86379c4c3c751
SHA512

e018968bbf03f7615865dbe8e53f9ff6cd2736d7560520edade2caf30adb7aedb437b5b0ecf3677f85ef99ae749ec2655e1b3d93c606a13284fe5d1270de198c
SSDEEP

24576:vU8dtO6f4fW6No2JuAPL00dY/dSToSbyAV05pLsIDZ5KJiTijkDgg:vLt1yp00d3Ttb+pn5KJiMQgg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb65133d78f4237605edade9c3f93209_JaffaCakes118

Files

eb65133d78f4237605edade9c3f93209_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 931KB - Virtual size: 930KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ