ec03536eaad8e7e1857c9485252caa84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec03536eaad8e7e1857c9485252caa84_JaffaCakes118
Size

1.4MB
MD5

ec03536eaad8e7e1857c9485252caa84
SHA1

e9f828c0a97af6d1fd4416415082a751156ff56a
SHA256

61b85a6043b0a4b93c08681e7dd455280809f5607a776bfb448a1f8f934ed414
SHA512

0808df03bf0de5b9243c030f94ec7aeb55c4e73ed1392067dc8655e98a017e380edf66dd1a788350a0fa4ed829be14836d4dd602cfbf18e423a27114889d1dc9
SSDEEP

24576:BYBNcCDRvAEjmb7TTdnTOsf2mYBbQ3zNuBNMLb59cHqYWmQkQkABVnS:efJdmb7TTH2izmYb59uQvbS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec03536eaad8e7e1857c9485252caa84_JaffaCakes118

Files

ec03536eaad8e7e1857c9485252caa84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1016KB - Virtual size: 1016KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ