eda1a90a730c0bda9deee8e95ab99d53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eda1a90a730c0bda9deee8e95ab99d53_JaffaCakes118
Size

20KB
MD5

eda1a90a730c0bda9deee8e95ab99d53
SHA1

2ed598567186e2ae3c404b02049fd3287fe17310
SHA256

02881f04840c77079e3195d458b0d45ffac80c5bdc3bb3b82e5fc3454a166774
SHA512

0ab5d503490c7930d5635b467a3ec0181beefc271135e056e93e2c71e561613740dcd71c35901c5d5f1f8b1cd564a06cb19a158d8ed5cf7ab5ae691ba2f59fa1
SSDEEP

384:0vzFWHD9ISxeMrSNC4inzMG8I/6g0X2Xe89aMbl:TIM2ZinzMfw6f2O3Mb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eda1a90a730c0bda9deee8e95ab99d53_JaffaCakes118

Files

eda1a90a730c0bda9deee8e95ab99d53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 597B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ