ed65c69edb63040895653d40aa3baf63_JaffaCakes118 | Triage

Sharing

General

Target

ed65c69edb63040895653d40aa3baf63_JaffaCakes118
Size

402KB
MD5

ed65c69edb63040895653d40aa3baf63
SHA1

705bc0598641473b4945337ebe3fd0225663aa41
SHA256

42bff403a7ed6c5dde25a4d2fd358fb8445d66a7bc877840f2eb45a7e0e91cc4
SHA512

b12974cf96f8ff4d43767479c66b22bb4d35ae3cd4d37b7d2dab6187723cb7372b01788d597665f03cf366209658d79bdbe890eb5eaccef2cf5ef02028129553
SSDEEP

12288:83Zip3S7uCiFLbKWXYHotJyuvh8od+xvSR:vp3IQl+WXYHotJyuZ8Wg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed65c69edb63040895653d40aa3baf63_JaffaCakes118

Files

ed65c69edb63040895653d40aa3baf63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.bss
Size: - Virtual size: 812KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 353KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE