ee9804bc272b3681962c315ec1d69f08_JaffaCakes118 | Triage

Sharing

General

Target

ee9804bc272b3681962c315ec1d69f08_JaffaCakes118
Size

137KB
MD5

ee9804bc272b3681962c315ec1d69f08
SHA1

77e9336083320d36e7a82184b3aec89e3473939e
SHA256

ce4ef509815253500e0b247b71ee5ac74e576fad5a3da666b77d64bab6fd6c9a
SHA512

16402c2ca54a504a5ad6c3a8d1c61d6a10841d287eb599699b8d1296891834dbfc92855834d26d08fff938ebf7f5a0f2e7453c9916e2fcbe5257120b7f94e4ec
SSDEEP

3072:1RdkkoPrGHkZLA63gGi2Rrb0+3/8ovQsilPxJJ5+7m7ppUgRk:5yfAwll/ilrJ5+qppUgRk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee9804bc272b3681962c315ec1d69f08_JaffaCakes118

Files

ee9804bc272b3681962c315ec1d69f08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 361KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE