ef0504b2d2e7c5cf1bed5e0f49a13595_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef0504b2d2e7c5cf1bed5e0f49a13595_JaffaCakes118
Size

12KB
MD5

ef0504b2d2e7c5cf1bed5e0f49a13595
SHA1

c46f8ec075d6b71c68299b555289c5b46d32c3cc
SHA256

55d229a6e34a2ec9fb20f7ec08d9b3f4cb4dc8b4ccab2d16d03425ab40d6cb3a
SHA512

49a6c1356a076bc581ef643d151c3d1393db2128ba6e6089bebaa3f4116f869fb474438063cfcc3a9ad16b5bd414068f9eec6d7f077f1622bb9423ebbd3e9a51
SSDEEP

192:npcGc1Zl2+VAfNxl1THs6xgzgVGjPlRdqL766nQAlKhFo22Xs6Z0oWz+V/aNC:OGcMJxDTHfRm8Hc6tWzsaNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef0504b2d2e7c5cf1bed5e0f49a13595_JaffaCakes118

Files

ef0504b2d2e7c5cf1bed5e0f49a13595_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 17B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Fi7ke
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE