eb6bb52ae3d9af0b76553c4d9b466a2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb6bb52ae3d9af0b76553c4d9b466a2f_JaffaCakes118
Size

588KB
MD5

eb6bb52ae3d9af0b76553c4d9b466a2f
SHA1

be0294cc0e8c98f2fc21ad30204bb1c2d3f01803
SHA256

af689f1129b851b1741a6a629d953e2af4e2ea97aef705cfaea18d3348005db0
SHA512

6432bff6e89a2f08f9460c53db38fe49161e9f4c1ba4b13bbee17d548d6eb3edff41401a01d093a2fd83859528f6c7b817618113efd43b5a971fee5398a1a029
SSDEEP

6144:h4AChH9GpJCaqaEf4jGZp47ijwiHzarXDYtgPHEgt:yAChH9GpJCaqdS7oXsz3PHj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb6bb52ae3d9af0b76553c4d9b466a2f_JaffaCakes118

Files

eb6bb52ae3d9af0b76553c4d9b466a2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

h:\MotoMania Project\Copy of engine8\Release\engine1.pdb

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 256KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NewIT
Size: 4KB - Virtual size: 41KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE