eff09b6dae12bd9d2fcc18d364e9a54d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eff09b6dae12bd9d2fcc18d364e9a54d_JaffaCakes118
Size

94KB
MD5

eff09b6dae12bd9d2fcc18d364e9a54d
SHA1

7cc285c8335b6bab1991daebccda05d9083b1b3d
SHA256

ca05a3b3ae4d5d10f2b09215ab4e91457e599d752747d6d789170769cdfb61ac
SHA512

8626729a65ab69c77dc56d5e1ac7d254ac2dd85eb5e907613c0339495bdecc6cf03612418982ecd6eb56365827dab1d0e9a2b1aca816040c497e38f2ab65c353
SSDEEP

1536:wbO889LGH7zi16xGTtnY1iHxwdyPGLOlGSOB73Uq7PcQPKrSq+XhL:wa88dGHyYDUGrSm7H71PKuV9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eff09b6dae12bd9d2fcc18d364e9a54d_JaffaCakes118

Files

eff09b6dae12bd9d2fcc18d364e9a54d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ojec=segments1

Sections

CODE
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ