ed8e406bc4359879a6bd4e9d0898104f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed8e406bc4359879a6bd4e9d0898104f_JaffaCakes118
Size

385KB
MD5

ed8e406bc4359879a6bd4e9d0898104f
SHA1

977659e334017bb1e2c43c51536bfab61c4cdaf0
SHA256

8e63d105b8a6b540c7969cfa4805d91fa6834e66fcc8f7533a77b3f40d4277b6
SHA512

3e6342585c429e949145881c15c1c21cce9299ec8baca9f333b1ef460a83e8d36b28ab12ccacdab6b4aab96b8b4af52c44b840b1e8e36737bb0498e4ef49ccac
SSDEEP

12288:Ppzem28DyV07RXfQkOUDh675QPVFuj+YlWwW7UB:Mr4RXYkVU75gqj+YlzB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed8e406bc4359879a6bd4e9d0898104f_JaffaCakes118

Files

ed8e406bc4359879a6bd4e9d0898104f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ