ef2af47a9df549d3db73c55eb00333fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef2af47a9df549d3db73c55eb00333fe_JaffaCakes118
Size

25KB
MD5

ef2af47a9df549d3db73c55eb00333fe
SHA1

862d6d7d9f28bfc9939bc3da0e0f64c280decfa7
SHA256

df147aac8f717217428b96f114713c3d5dc1febf08b350061ec09220009de330
SHA512

cd2d528dfde068205aad4b1a56aeb1db9867ef78a7eace1e8ae63bcab688357fe20520ec7c3cd71c540e1d217b7e6884fe45caa46d32f29671d31ab317a13996
SSDEEP

768:mWFgNNCqf0geyQTGpRBCSr01Hj9tTOnxgsDzO/wyN:Veoqf0cQ0USQ1RtMDi/wyN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef2af47a9df549d3db73c55eb00333fe_JaffaCakes118

Files

ef2af47a9df549d3db73c55eb00333fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

[CUG0]
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

[CUG1]
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

[CUG2]
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

[CUG3]
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

[CUG4]
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ