efe76880dcc999b5fbb882711329a440_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efe76880dcc999b5fbb882711329a440_JaffaCakes118
Size

197KB
MD5

efe76880dcc999b5fbb882711329a440
SHA1

b2cf4480e494a9f88cb2bf2e98dd44da1016cb90
SHA256

73faad2453f5ed0087690d958ba36c9ffb6b1410b1e763bd69b866bbb8f0d4fa
SHA512

4bba677f41c86636ce141554af9a904b95ae1bddb8969c0fd1162f3dc07f4ff755cad4bbfa98e5b0afcd7e3a0796e028e4b2f7aeb6c37c3a088f6fe04bf5baf3
SSDEEP

6144:iinK4WKOuf+BlzWbF1/JThsuhErUG4Y/NVpIVsyhttjFUAfL3TYY:G4WZw+B98FVZh7I5/zpIVsGbjF7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efe76880dcc999b5fbb882711329a440_JaffaCakes118

Files

efe76880dcc999b5fbb882711329a440_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 128KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE