ef89c6eecca9e725514ac4adc4311138_JaffaCakes118 | Triage

Sharing

General

Target

ef89c6eecca9e725514ac4adc4311138_JaffaCakes118
Size

7.4MB
MD5

ef89c6eecca9e725514ac4adc4311138
SHA1

153558098ff0756cdf0e9b03e85ffeabf8a0be88
SHA256

cc2d9a31407008269be1bf78e7aec1421ab4e8a5fb6bd8d96a2627627f235a0b
SHA512

2cd7970a11949d585d039e8e76bebf91ddd462ca29f3c39c5d9756af1f6be993c921a8a710f46d0b81c3f7908a0cbe51d00aaa2f6df560626d14e9337ac2fcfa
SSDEEP

196608:Qip1KwPjzyjMDZ1kM65jmcVKdG5fRv6uWw:3Dzyj2Z1k15f5T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef89c6eecca9e725514ac4adc4311138_JaffaCakes118

Files

ef89c6eecca9e725514ac4adc4311138_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

5290
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5291
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!rc!
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ