ef03ee349df22a82c36ff445ab8e3d90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef03ee349df22a82c36ff445ab8e3d90_JaffaCakes118
Size

44KB
MD5

ef03ee349df22a82c36ff445ab8e3d90
SHA1

2d9642065078eda3502221d2cdcc94a2dd17d923
SHA256

649cc3bf2d64aa97021011deaeb106d5fb5981961886cd819e9b7ceebfeae0ad
SHA512

0efddcbcf4f81f5791f18765cb5d04101f5a8ed267db32528cd1806422fea143fb7bf64945b83ff369d259a937f3ac7a1877fc739ef9260bde235c02524bcb3f
SSDEEP

768:6hpxK66ze+laDyqxGGLM825PbXu7VMFbvFQDOpVntLfpw4bJd:K4ze+l0LM75j+76vntLfp/Jd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef03ee349df22a82c36ff445ab8e3d90_JaffaCakes118

Files

ef03ee349df22a82c36ff445ab8e3d90_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_TEXT
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT$XIA
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 28B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE