ef205cd810ecdd1f8915e6ff0d489ed7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef205cd810ecdd1f8915e6ff0d489ed7_JaffaCakes118
Size

4.3MB
MD5

ef205cd810ecdd1f8915e6ff0d489ed7
SHA1

8c5e41368d71c567490013cae795e6f3de2a2b73
SHA256

572d79ff5644cf9bbb976c893b7e81ce7c9061ef7ace55a4c6777e42f13468a8
SHA512

83b878a81cd0af22bd3cf732d7b4edb7a26664fb9bce30d6302c6c2639665f8baeef9102cc3a0708844be4af5ab1ca5fe985b5e9a3be9dfc4a3bc235a34c808b
SSDEEP

98304:YGrhHf/Gsn8Kri1yNWiK4Ptcuo43gw3XArROaWGMB2Shx:xrdrn8jzWPloUFYFENx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef205cd810ecdd1f8915e6ff0d489ed7_JaffaCakes118

Files

ef205cd810ecdd1f8915e6ff0d489ed7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.tls
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dataJ
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_sua
Size: 652KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.textvb
Size: 270KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdataM
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 391KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_BSS
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE