ed79a0e8a63080fd008ab293775420df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed79a0e8a63080fd008ab293775420df_JaffaCakes118
Size

1000KB
MD5

ed79a0e8a63080fd008ab293775420df
SHA1

220a84e64d21c2322ac7dca924a51471ade620dc
SHA256

c068893109083ea82a19fab23a8f42c51646ba26cb573dc94933a92496493ed6
SHA512

0a1401a29b84c364d5d4693ced39746b8eb040ca1b7b62c0afd2d3a85d31b178354f820ce99e9aa2887383fdc1dc38eb22606cbf0e080d5825e695d39e3f76db
SSDEEP

24576:Fd7GhQwo3K/T4dvdurm9XoM4nc1B+5vMiqt0gj2ed:T7GGwodv4m7qOL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed79a0e8a63080fd008ab293775420df_JaffaCakes118

Files

ed79a0e8a63080fd008ab293775420df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ