ebf8d75447e2deee3714283e5627a53e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebf8d75447e2deee3714283e5627a53e_JaffaCakes118
Size

199KB
MD5

ebf8d75447e2deee3714283e5627a53e
SHA1

a7ad919320202dada576bb010e21bef9bc11ce2c
SHA256

c97200a2d7e300860d322d3edb0f9fdee334e6a418add27d13c75bb8efb89e85
SHA512

f50c38d290e1cb53ed7721098de97af70da911c9ac985a4f1463ce687ac766fb0fe07ba3fd03a779f180f231a1c32cf0c4ba4f56d3127921871847b24829d50d
SSDEEP

6144:LoJ9M6th4LGHQoHyGqxuXr54GOi/U6Aj3xB:LoJ9M6D4QRHyjobvdJAj3f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebf8d75447e2deee3714283e5627a53e_JaffaCakes118

Files

ebf8d75447e2deee3714283e5627a53e_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

icacls.pdb

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.oli
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE