ee8a43f1b54fbcadc3f5b47a9f5056bf_JaffaCakes118 | Triage

Sharing

General

Target

ee8a43f1b54fbcadc3f5b47a9f5056bf_JaffaCakes118
Size

84KB
MD5

ee8a43f1b54fbcadc3f5b47a9f5056bf
SHA1

cb442d449cec38d58ab3bf4da48df4f1e637e7e4
SHA256

91553f626645bc2fa5b8f578d73c85b1ffb7bf18e9bdc51ab0f25ca86600b4c0
SHA512

733f6820409f39432c5149a62ca3ced3a6de87e2da4f3c73aa2cbb3605f3c8a4a07c8bc2159fa50151728383852e84c9816a0dae7d849dd05cb78a80a158ff2f
SSDEEP

1536:larO2R3XZVPlF31n1TClFvLLcAGJn+yRJCPDzGvxuJxN4Kt+cm:lV2BZVPlFlnxClFvLLcA+sPDzGvxyxNu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee8a43f1b54fbcadc3f5b47a9f5056bf_JaffaCakes118

Files

ee8a43f1b54fbcadc3f5b47a9f5056bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ