ef62a810f1bad5fc4cb89aa09edf1231_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef62a810f1bad5fc4cb89aa09edf1231_JaffaCakes118
Size

1.1MB
MD5

ef62a810f1bad5fc4cb89aa09edf1231
SHA1

2604ef945dc239586393bf54e3f7e9d460adfb24
SHA256

0fa185fb4800e682de10ee39b625d5d4554a3e5dea3e69cf6a047871a275a03d
SHA512

8d3696a18238b2d839301c9aefc7885aad33887fe60d15a4ee0a116e2ec63ecf2cd0744fc312529b355f5b0b63183cbced70221b95836148f7c9143489bb9cf1
SSDEEP

24576:wdYqMFncA1RY20hdp7Wah9y6g0+Tq3qkHhC5ASYmSMGil7UG:wdYRSV7BVgBG6EWAS+MXlUG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef62a810f1bad5fc4cb89aa09edf1231_JaffaCakes118

Files

ef62a810f1bad5fc4cb89aa09edf1231_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ