ed783966d9683a727ad7b3546f77b594_JaffaCakes118 | Triage

Sharing

General

Target

ed783966d9683a727ad7b3546f77b594_JaffaCakes118
Size

300KB
MD5

ed783966d9683a727ad7b3546f77b594
SHA1

a8da804fc3e1cd5d1234d5870d1421515d6cf1cc
SHA256

224dadb71bcbe6332da2c1030b11b9aec03f0007d125f2d75e7303dcad015efc
SHA512

fbe879dc9c65429059d9d4244b174154b55bda15adae4a6333395838993a1bba994d7cefca6f9fbcc63c46be45619b103c3bf72246f77e1f565b632fb2175f08
SSDEEP

6144:RH6xXV7njJG2WmLl8z8ExvjXRvu1iEJYBdgHrz0sDMlbl8weLBBBcvl7oS:RHcR0subjBvu0E8gUCMpCZHeloS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed783966d9683a727ad7b3546f77b594_JaffaCakes118

Files

ed783966d9683a727ad7b3546f77b594_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

KuNgBiM
Size: - Virtual size: 300KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

KuNgBiM
Size: 293KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

KuNgBiM
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MCTeam
Size: 512B - Virtual size: 512B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE