ef5493a0cf71475d746c3668095daba8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef5493a0cf71475d746c3668095daba8_JaffaCakes118
Size

27KB
MD5

ef5493a0cf71475d746c3668095daba8
SHA1

133874631cbd4c58a45b56d5514a630e2597f8fd
SHA256

3526bc924ba3a86957c0051cbc746716c7b8563a46f0159470b65f7e6442053f
SHA512

d2e7491a491c1cd419a54c44086b2b85724cfed042c244269957d73f7fc8c65ed79697a270b0f203550b0758e1f35ccb6e4f89ff7e4217bbb4c083931bccd1b1
SSDEEP

768:+gUpAudwtjpQaCyMRiNH/buv1dTm61pF/O71y:xUiudwBp3CyM8HsWy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef5493a0cf71475d746c3668095daba8_JaffaCakes118

Files

ef5493a0cf71475d746c3668095daba8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ