ef1506171268c1f461bd69e4080a5e59_JaffaCakes118 | Triage

Sharing

General

Target

ef1506171268c1f461bd69e4080a5e59_JaffaCakes118
Size

297KB
MD5

ef1506171268c1f461bd69e4080a5e59
SHA1

91126c1bb24c622ed14da8ecd0b7cb0cc597d938
SHA256

33ca0c8ee357a3855db4388f9a0f3da22323998a1ea97a79fe643b0b26f28540
SHA512

d13bd721feb3a0fc4fb3688721c99781eb63cf3e2fa3dae36016ae2c8461b4a36b6e495346209cdcbcc6e89e88d0b33f10a26d2ba3354579d1c8e394c15ec011
SSDEEP

6144:e7wpZEUqZyDQetayYst3wqSoQBA8+KrnO34PHzqplySiVjns9:ewEUNd0stA1oQBA8+KDO3oHzK8SiVj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef1506171268c1f461bd69e4080a5e59_JaffaCakes118

Files

ef1506171268c1f461bd69e4080a5e59_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 256KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ