ef0b923d0a7d081a17334e7f6b20f22e_JaffaCakes118 | Triage

Sharing

General

Target

ef0b923d0a7d081a17334e7f6b20f22e_JaffaCakes118
Size

543KB
MD5

ef0b923d0a7d081a17334e7f6b20f22e
SHA1

3e8f2a0f0d29dd04775ec1d78b9bdec5e9cb1814
SHA256

7fbbebf2d98cd32a5601ea2a6d11018feb47066e114e548656729fc42b93f326
SHA512

b51205eeef9f0361cd7175c640ed39abcfbf488dc0df85e9f1ac6c9ecf3c4b6a4b93f3ef990f366d1ffa375f7eec70c2cf7681cb6561258b1de45244efd5462c
SSDEEP

12288:teqi9Yxxd3p0IyZuAL8K6M9aAdBDqqWH2w:teMx5p0ICL8KFdFDWWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef0b923d0a7d081a17334e7f6b20f22e_JaffaCakes118

Files

ef0b923d0a7d081a17334e7f6b20f22e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.CODE
Size: 5KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 795.0MB

.xirtox
Size: 530KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 923B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ