ed8c904ec3e02afc9da32c6a8cf266f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed8c904ec3e02afc9da32c6a8cf266f4_JaffaCakes118
Size

4.4MB
MD5

ed8c904ec3e02afc9da32c6a8cf266f4
SHA1

98adbe51b98c9068e8c702bba70fdaa4008a0059
SHA256

5c4c3c0e023e4dbe6573ce89ca176eaff5bab830e9d08884d21b2bd006395c36
SHA512

6a3aa328b6bdc6850b78cac86519b1eb06fff1a89013bc56f6dc4491a8e3f22255f7c07346f70c8d7939ecf4969894ff721658fe90f6934f5e1c8b3252523cc5
SSDEEP

24576:qRkLxFgjON607fJuJa8vjil3tTRcM3kMpiiMoq8R71N6JjNjX7tolx96Gcks:qCFgi67aW+wMsxoVR71NgV5owDk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed8c904ec3e02afc9da32c6a8cf266f4_JaffaCakes118

Files

ed8c904ec3e02afc9da32c6a8cf266f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 832KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ