ede836d4725d8261d349981ea1a0f8a3_JaffaCakes118 | Triage

Sharing

General

Target

ede836d4725d8261d349981ea1a0f8a3_JaffaCakes118
Size

650KB
MD5

ede836d4725d8261d349981ea1a0f8a3
SHA1

5a9e0307cc1d879da52868ea4f9815f93f8a5a4d
SHA256

ed64be8524e1455e108a9d4a23b9002493fff0cf59b1ae0d04b498d332dde224
SHA512

4175a66e1d232cbd5a393359b02d6a1647e8b81a8dee15fede1b459a41123033cf813f41cb7507f0c17161462f238679f721ee35b1f2c90f79f2d53878c1afea
SSDEEP

12288:/UP+EvK+mh9Vu0+SBxxxxu3zWWwzUJQo8LpEfMqKEtz27E:/yTmh9g0+B3zWW/JONd3Etz2w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ede836d4725d8261d349981ea1a0f8a3_JaffaCakes118

Files

ede836d4725d8261d349981ea1a0f8a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 106KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ