ec042e70fec3a4d63df1f28a70988847_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec042e70fec3a4d63df1f28a70988847_JaffaCakes118
Size

1.8MB
MD5

ec042e70fec3a4d63df1f28a70988847
SHA1

2317bcd91425019ed19a87a23add1d0df0f958a4
SHA256

d87ac670d98ab7392600df3219b1718f8b8d9f5dc73346b55b7ac0f5e32f243a
SHA512

fd8758b7fa8016ebbe10e4ab25b790ec0d6eae92e7ad0a46406368bdb7533f2a2ed5b8b042ea14074b979416820b2ea501f1c877f1c26484a8188de65198af15
SSDEEP

49152:LYp4piW/cPmzQM8mIFDorUla5k5mEErorqfN2Uvo:kpOUxm4AEz56Uql2yo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec042e70fec3a4d63df1f28a70988847_JaffaCakes118

Files

ec042e70fec3a4d63df1f28a70988847_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

BA!kU=(p
Size: - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

S'ia@V)(
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

!yZ$cC42
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

h/y?CLTc
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

KE["It=\
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

lO9KQHuB
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

FCeX*^I.
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE