ed68963c8cf7e1d2cb4ed07fd2dbc1ee_JaffaCakes118 | Triage

Sharing

General

Target

ed68963c8cf7e1d2cb4ed07fd2dbc1ee_JaffaCakes118
Size

385KB
MD5

ed68963c8cf7e1d2cb4ed07fd2dbc1ee
SHA1

757d1d072b4b7c00fa6e8a80172ff2fde8ada071
SHA256

aea0b44ee505bed8f81304fa31cfaed2e76d5ceef0b33c8899c02f74dfce4b35
SHA512

1259ea643d78ec621f8072633848fe06f5e6037824a7ef85030867455912c8ed4e272dc3235245c2d18f49183b04384441fb710c9ebfad94788861a6685b8d29
SSDEEP

6144:ml4hercUoNjh96zVBQLJWTsxZJz51nIFGkFlpTs8tyxmhQ/cIY7gdB:m6HN/uQWTsxZJzfMGk28tyxm8cIygdB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed68963c8cf7e1d2cb4ed07fd2dbc1ee_JaffaCakes118

Files

ed68963c8cf7e1d2cb4ed07fd2dbc1ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ