ed2a8f04a53b86497f4f6f07f97b0245_JaffaCakes118 | Triage

Sharing

General

Target

ed2a8f04a53b86497f4f6f07f97b0245_JaffaCakes118
Size

385KB
MD5

ed2a8f04a53b86497f4f6f07f97b0245
SHA1

7bb5be995a621097acdd30c182a4d9a7a4c86979
SHA256

75edc2ade95df7cc2a1bf4c73ec2138ffe40e221a799f8a41927e84d425d17f9
SHA512

3c852b46b91a9c96d2ea1283b800ddc0221ff001e5620ed71e3c9517154d704460b455ca9ff7c20013b7c1e5197a12db2eb6f20c5bfff2d8c82756711445a348
SSDEEP

6144:7U30N7n6VuY9FnsNWjVTerPp7mSLVkxmnneD9TUizV6LQ3VrXLBNe8VftZN42nB:A30NzIu4QPpDxiIeD9Tjz6QFTLzzNxB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed2a8f04a53b86497f4f6f07f97b0245_JaffaCakes118

Files

ed2a8f04a53b86497f4f6f07f97b0245_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ