eee56256ced35d0cde216432f0bbb389_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eee56256ced35d0cde216432f0bbb389_JaffaCakes118
Size

3.5MB
MD5

eee56256ced35d0cde216432f0bbb389
SHA1

0719462b456a58a6506a3ebab8e8fe4e4f4b5b4f
SHA256

a66c66faabd6f39ab0d89686d681fb1647e7e73019ace9973dd02fecf37a8029
SHA512

a1e278c96c34a3e9660fee8364e336fe5d0b38fa6eb94ed7726353733a22e897ac870645c9e00e81bde9e4a7a1524a7b3446fb78e9a5c3f6db5f6ce692afb992
SSDEEP

49152:GNQWUUHj/uYT2eqPlbcx6iWArOfxKu699nl:GNAllbqvSfxKu6H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eee56256ced35d0cde216432f0bbb389_JaffaCakes118

Files

eee56256ced35d0cde216432f0bbb389_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ