ef35c0fa981c53dc30836c1ea506a006_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef35c0fa981c53dc30836c1ea506a006_JaffaCakes118
Size

121KB
MD5

ef35c0fa981c53dc30836c1ea506a006
SHA1

ee045452bc24d943917ed5514a1b746a5743dba2
SHA256

98d11c834bddffe9e2b661a8fb8d81c2df2c2bbf54a77745574a0d1472ae7ef7
SHA512

42461dac4230359b8d733973f692e078bad19c49f8ee2b7a341fe813e424ffd346363020ee48bcb77b42432460cc1f626f65daf62a9ed07a6a5406c4f1c69641
SSDEEP

3072:yyYIZzBYES49UI7rrpV1jL2x8xrG5ve/ITllU+mh:y3kjS49z7rr1X1ilUP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef35c0fa981c53dc30836c1ea506a006_JaffaCakes118

Files

ef35c0fa981c53dc30836c1ea506a006_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.datap
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ