ed67b14e9734033f0df8f89d497f9b91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed67b14e9734033f0df8f89d497f9b91_JaffaCakes118
Size

194KB
MD5

ed67b14e9734033f0df8f89d497f9b91
SHA1

a283a130cb16233db5422a49d03bb54fa32f42d9
SHA256

9f8d35c2c2281e2ec70de1d0adc60b6884ae669769848ac55b9ab5da439d7de5
SHA512

d13325073d1d1f274ffe815596ef1059f91652fc72cd21ae6a5cfee93e56ebfde2356e35ceab661b807c8c0365e18e3cf8ab38925cc93d463d9a25d2ea440941
SSDEEP

6144:13LNetHKndlFUF2UDg+RvNWKpOb71qEds:17NeJKndlFMY+RvNWp1qEu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed67b14e9734033f0df8f89d497f9b91_JaffaCakes118

Files

ed67b14e9734033f0df8f89d497f9b91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 58KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZLB
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE