ebd249dc8fb407d2621a82677da35788_JaffaCakes118 | Triage

Sharing

General

Target

ebd249dc8fb407d2621a82677da35788_JaffaCakes118
Size

37KB
MD5

ebd249dc8fb407d2621a82677da35788
SHA1

e7fd533a217f5e2b345e476b047d3d0bbc80d7b4
SHA256

14b89cd610bcf53f076bad1fea8eddb86eee9936e0ffbfb09290f01886b64bbb
SHA512

6ce9e27870f0e0ddaf3637b028adbe8e176b3b7f69d641515168b96548be740ddc408855128736c23e30254f155b4fbaa176e19e42c991cceef87cfe9e4fdc7f
SSDEEP

768:G4tNlbA1b7YVVVPMR7kGLpdB5GxYBmuxZeqw:G4tNVAVKMR7B3GxomuxZel

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebd249dc8fb407d2621a82677da35788_JaffaCakes118

Files

ebd249dc8fb407d2621a82677da35788_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 793B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ