ebfda9ef10c3fb693334356cab8b92aa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebfda9ef10c3fb693334356cab8b92aa_JaffaCakes118
Size

414KB
MD5

ebfda9ef10c3fb693334356cab8b92aa
SHA1

583f4dd808ceb2f2b41f556049223ceeb3413b17
SHA256

19c10f090d7a1b5b216804d6c2807524d44885e211f2a206fe25de1ed2989d57
SHA512

c4d10a65e3d0096f9ac838fcdbd4fa709aebc0a10adcc2aeef498c717a3e9ac056d36719ac0025f28d451de750bf782a8798491847aedb6157a53bfaf016a376
SSDEEP

6144:wPjHjVnBPo8rU0QHyZlVqUDq4wL3JLVM/JrZT9snch0w487K0C1sm82lL:QVnB80QmjZxwL31G/JP4kjYsm8cL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebfda9ef10c3fb693334356cab8b92aa_JaffaCakes118

Files

ebfda9ef10c3fb693334356cab8b92aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE