eb899b95a8fa02ea41dbf3d8447cd4eb_JaffaCakes118 | Triage

Sharing

General

Target

eb899b95a8fa02ea41dbf3d8447cd4eb_JaffaCakes118
Size

724KB
MD5

eb899b95a8fa02ea41dbf3d8447cd4eb
SHA1

847a8e601c86d0efa85c7fe2fa926237587cbdb5
SHA256

fee6057e8c8a08b08da2de82c22df01f863d3630b6be2350386b58a8fc313be4
SHA512

c54303efd50a1965a357cb5350f0359e9c4587b2c0c6f71bcbd06523348df9b0986b7a03e9a8016f9f5db49576edee78719ca4c7e960bd91ad55894bd3d78c47
SSDEEP

12288:3t9v5UZIvX41qVb0xxOSDjld1LBRXjIjbxizTTiNbD7i5l:3t9O4wm0xxOOrdR8+Tit7iv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb899b95a8fa02ea41dbf3d8447cd4eb_JaffaCakes118

Files

eb899b95a8fa02ea41dbf3d8447cd4eb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ