ebd600da5ddc294df469aa7a05b69786_JaffaCakes118 | Triage

Sharing

General

Target

ebd600da5ddc294df469aa7a05b69786_JaffaCakes118
Size

67KB
MD5

ebd600da5ddc294df469aa7a05b69786
SHA1

9a6cbedaa59499ba453e8a3d459e331e53852ced
SHA256

32a15b8aebea994813aec5f233c3d67c5e0bd41bc3b4abbbed59dee6abffe0c8
SHA512

8584aca3d87e7fa248e7e8e07cefd5f876e6da9eb38d157669d249fdfd56a6a3ff2356c19917415e8b0560ba84b7dd29b69804d8c3ba4863f5a75717ddee5b9e
SSDEEP

768:TK9qt2QS4/UUv+C3AlQcDvAfFpz1DmhAXAF:+9qt2QB9C65mhAXa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebd600da5ddc294df469aa7a05b69786_JaffaCakes118

Files

ebd600da5ddc294df469aa7a05b69786_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

code
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE