ebd792dcd26a8089313aefa5a7835b32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebd792dcd26a8089313aefa5a7835b32_JaffaCakes118
Size

376KB
MD5

ebd792dcd26a8089313aefa5a7835b32
SHA1

6f997c7b3543c667cf821ac02e3d62550f8767fa
SHA256

3c9eab04c24bdb8d2cd7725f94a719166254320ad22104b0361af54a2fe5f87e
SHA512

2a19f1e1571d821309e10aaf6c70008a67579b98690e3c30528d1072818fe20804193163258f38ec079bd8cadf83714602c273e90c6f7767fff161d4aff852e0
SSDEEP

6144:zIHYsZbS31zXqSNQgeiOKnDYVH0pwpMWEmpRBJ1NuUBY+f7zAF11whggaoHofph2:zIVZel6SOgeiOKEVH0ppWfBJ7XBczmRT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebd792dcd26a8089313aefa5a7835b32_JaffaCakes118

Files

ebd792dcd26a8089313aefa5a7835b32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 948KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ