ebdf443d11f8976330d02d8e87db6022_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebdf443d11f8976330d02d8e87db6022_JaffaCakes118
Size

1.0MB
MD5

ebdf443d11f8976330d02d8e87db6022
SHA1

c171ea521f56780de8a7c17a7fb14d530618dbe5
SHA256

ff7c77523b4f63f6add26fa0759d2665df11a1337d18df92778a8cc42cb5e1ba
SHA512

166e44817d96312b3818c50cb5fee49a8952d948d12049eba9b3241e56cb88f083b6b96de6879804806aa58a6a54092d4972302a0a6fdfcc857bbc583f3b8e1b
SSDEEP

24576:Aj0gsTi2ZOmxL5VVsWsHwHFBwjVEkNkMG5s:AjnBs5VFUwHvDQ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebdf443d11f8976330d02d8e87db6022_JaffaCakes118

Files

ebdf443d11f8976330d02d8e87db6022_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 561KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 417KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ