eea843c1820a7b4ad8c43b1011d9dffa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eea843c1820a7b4ad8c43b1011d9dffa_JaffaCakes118
Size

612KB
MD5

eea843c1820a7b4ad8c43b1011d9dffa
SHA1

3776a698c7665c77bcaf0902a2a98107cd9eb2c2
SHA256

fee350a549a135035e735ea095bb4fa10a44fc5f2258739aed04145e65b05d07
SHA512

972064d0d4de7249d0c4e33b20df53bcab9989029b21b516df5b1d703bf16821e429a423c516033adfe0accefe4eff11bd970f0007583c34e02f8f8e3f845993
SSDEEP

12288:bFFMCnvEYAVF9Bfv21REFbTJeAlorag0PAyX5K:rrC7TkAlGaVV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eea843c1820a7b4ad8c43b1011d9dffa_JaffaCakes118

Files

eea843c1820a7b4ad8c43b1011d9dffa_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 504KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

YgEDa
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ