eb9a6aa5c2fd0291d07c2fd69e122517_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb9a6aa5c2fd0291d07c2fd69e122517_JaffaCakes118
Size

12KB
MD5

eb9a6aa5c2fd0291d07c2fd69e122517
SHA1

5e693b1640d8f355d78090b4ac7303974b209e44
SHA256

c8ae0aacbb4211d74fbd51a9746173e9a501eb430ec6c3c4aeaaf9c4eec582e7
SHA512

3c4282b1ceb6a64e827e4499e5a314656b98d86a7867641f4f321dd7eb0a4ea2143a7f11262983dd90366a4d912f118119273d75d75e006c481efccaed1dcd5a
SSDEEP

192:pY0OSYYVGk1gVcy59NxmIyDYSCX8KoRufpQUdiq857ZVX5OJ6n3Yfw:pfvYYVGSgVcWO7Udix7j5X4w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb9a6aa5c2fd0291d07c2fd69e122517_JaffaCakes118

Files

eb9a6aa5c2fd0291d07c2fd69e122517_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ