ef89972bbc4de24840b2c8aef9ec1a05_JaffaCakes118 | Triage

Sharing

General

Target

ef89972bbc4de24840b2c8aef9ec1a05_JaffaCakes118
Size

858KB
MD5

ef89972bbc4de24840b2c8aef9ec1a05
SHA1

29889b94178eea9e851a387ef070abda7d1a67e9
SHA256

8ab6876f05b74342ac0ece11edeb25a06de3a00c6f1aa75c175bc7e72ac9ca05
SHA512

62e7a784fd26184c14a67f5129d6391796c08abebaed21fc414611ce582fd5ab3f2a4b667467384329e021f5e339491df7d95dcfaec93f30b4cab4e47d874d1b
SSDEEP

24576:7VDjYXaEkuj1iMrCy6NXIxXC985500scM8scM8scM8hRBxhRBxhRBxhRBxeO+ueu:7WqEPUVy6NX6XC985500scM8scM8scMP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef89972bbc4de24840b2c8aef9ec1a05_JaffaCakes118

Files

ef89972bbc4de24840b2c8aef9ec1a05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 407KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ