ebeaef5bdd9b353d3fa091c0447f00b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebeaef5bdd9b353d3fa091c0447f00b4_JaffaCakes118
Size

2.2MB
MD5

ebeaef5bdd9b353d3fa091c0447f00b4
SHA1

25c581aa744a437e4b0b46a38b8989ef290fc436
SHA256

f592d1f67bb8e60902d79e66980a8737c4ae09b0f929ec28951da41ce7b5e496
SHA512

5c638678084c3be8a40227fb6ef95c7e009acdcd1f96b95c5161b1f42327eac74b483640d2e6f8bb0ced734c4e25774f594f0c54f2e26b1ef21dfcf512523360
SSDEEP

49152:AjlaGhZdmZmQ9KTWdpuGDNMv4HttLEBMhRG:AjlaGgZP9Zd3D6v4NtLEBMhU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebeaef5bdd9b353d3fa091c0447f00b4_JaffaCakes118

Files

ebeaef5bdd9b353d3fa091c0447f00b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 33KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 966KB - Virtual size: 965KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ