ed8fb11ae0b14f9ff19511b2e1840a18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed8fb11ae0b14f9ff19511b2e1840a18_JaffaCakes118
Size

219KB
MD5

ed8fb11ae0b14f9ff19511b2e1840a18
SHA1

6b816da3850b1d73e1ce5c1a58008bf314c71676
SHA256

fdf1d3858ea23c5486a7c23fdd5d81966eae2172d72f8ed245b2493e0b75c9fa
SHA512

c1cf5f63a81d89136bb1decaea1df506656cf4627fc9ff78a680362ba7ec820a321db0d763fbc2e8b4ba5ef7f02e72eca2577f39af66cea4a79a82ffa62ee4ca
SSDEEP

3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8RkgnYHfQlAu:o68i3odBiTl2+TCU/Yk8KfQlj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed8fb11ae0b14f9ff19511b2e1840a18_JaffaCakes118

Files

ed8fb11ae0b14f9ff19511b2e1840a18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ