ed020ccc602a6cddc68c68fd9ad0a4c0_JaffaCakes118 | Triage

Sharing

General

Target

ed020ccc602a6cddc68c68fd9ad0a4c0_JaffaCakes118
Size

385KB
MD5

ed020ccc602a6cddc68c68fd9ad0a4c0
SHA1

a97ab4fcb1a66ced7274257057cdf306e141cf52
SHA256

abca887fb0c5648f12ca4b9521edd986c5f84b974669c5909a3c9329fc5d155b
SHA512

35da0ea8deed260036a31c9e132c859a7b9754eb8fb0df922a32b960fd12e7bed8251233ce636096a1c245c84ae581dd07cb63d06ba1316c7a61d929b4b59c0e
SSDEEP

12288:ng89U864M4ijdBHaRhxJgOle2iLzzeQGjQ8B:g8S864ijjHaRfe2sneQQQ8B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed020ccc602a6cddc68c68fd9ad0a4c0_JaffaCakes118

Files

ed020ccc602a6cddc68c68fd9ad0a4c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ