edd2f9ad0e2839ac338b42e58dc4b0e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edd2f9ad0e2839ac338b42e58dc4b0e5_JaffaCakes118
Size

5.7MB
MD5

edd2f9ad0e2839ac338b42e58dc4b0e5
SHA1

9d7c2f9d2d8c30dec2390f50645d59cb4015a054
SHA256

aa0e2486bbd9c9777f8057b45302afc4b54edd6f2ccf24e35d203e185219c552
SHA512

a97bfccce87a970def91b0efece059fbf7899f51c1a32aeca36fe9664a7431b1e96f8e2c07e044c90c216cebd6e5700ce293ccae99bf43b1016b5c7b10414c3f
SSDEEP

98304:D2uaorNqTFpP92tpojiQb5/aVv6tmjhX0cn1Eri3GWuXUz4nkg3panBYg5lC40Wz:DBa5FpEtpoWC5SViI1EYCrSG5Qe3QPlD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edd2f9ad0e2839ac338b42e58dc4b0e5_JaffaCakes118

Files

edd2f9ad0e2839ac338b42e58dc4b0e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 577KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ