ed0aedc65f62399ababb1cf2164ded0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed0aedc65f62399ababb1cf2164ded0b_JaffaCakes118
Size

244KB
MD5

ed0aedc65f62399ababb1cf2164ded0b
SHA1

503782c28b7ea882a036818c05d328d485c7edf8
SHA256

768fd96e560de046c504f174c9f5b4187e94106cd6a5ea47082a4ff75a9bfb89
SHA512

9e5686f1d54c882ac35b104a08757456aeb92fcd227fcecf4155716e15c02d9f6e55414307d19df60ae88eb7b0990eb124b67826ca594e9a5eb2f4bf41ab4218
SSDEEP

3072:m5RjMRLYUo9QX7Oc2GZQlsKwsbMusvfjLWDOxlVRDTvU0v39T:6N9QX7OcZZQls9sbMfWDOtVh3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed0aedc65f62399ababb1cf2164ded0b_JaffaCakes118

Files

ed0aedc65f62399ababb1cf2164ded0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ