0efcd26e8ccf57dd2ce67b2971ddc7b7_JaffaCakes118 | Triage

Sharing

General

Target

0efcd26e8ccf57dd2ce67b2971ddc7b7_JaffaCakes118
Size

47KB
MD5

0efcd26e8ccf57dd2ce67b2971ddc7b7
SHA1

25a8ea6bac0ac452f0b14a8461e8e28c9bb96c7b
SHA256

6a94a0b8a3a01a9dd5dce3ed5658b2e16a103d511a6a863d0ca0e6b8d360ac4f
SHA512

ca0b1eafced6e0a2278338745809017f725c36ac6dd3f128aa60519c1faa514b71b83b7797233266c2d584bd3984435068eaa7709b217cfd56818bddf289811e
SSDEEP

768:2vo0ikAuq2QU4QKOIm3DzzDS3lVUFkejHDiGpIh1dKVwY8+E:2vo0wuqvADilVzuWzh1d/F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0efcd26e8ccf57dd2ce67b2971ddc7b7_JaffaCakes118

Files

0efcd26e8ccf57dd2ce67b2971ddc7b7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 507KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ