ef1d1f0ef24f97bb0f22ec5a3da7f23d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef1d1f0ef24f97bb0f22ec5a3da7f23d_JaffaCakes118
Size

41KB
MD5

ef1d1f0ef24f97bb0f22ec5a3da7f23d
SHA1

0d75ce6be0131713e8f67c530be8aebe074d64ec
SHA256

ce31dbe7c3f2cb0968d0176c15d4d32e65dafc0dcebd7707bbf9b0a3a2f91131
SHA512

3f5bcc0b0dc96113b74b12d8d47ba9468babc6ff2e0a77606a1e0d0a25d90d403f4e39c254091ba47f2605d14640e2e12670292f7c5fc9c4248156a858aa8931
SSDEEP

768:61x8tPjuVqLLeCFJQFLjkCNelJntMaC04YXmmVaO:6j8tPyGHJ6L3GeuIo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef1d1f0ef24f97bb0f22ec5a3da7f23d_JaffaCakes118

Files

ef1d1f0ef24f97bb0f22ec5a3da7f23d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 597B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ