ef9e5be353fcea5e5cf148056fa4a75d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef9e5be353fcea5e5cf148056fa4a75d_JaffaCakes118
Size

19KB
MD5

ef9e5be353fcea5e5cf148056fa4a75d
SHA1

3add02857d6541660e02fc4a07d74a30d1ae1ff7
SHA256

94238722c9b9c36aaa1a5def8fb217cf97430ef36c569c7532422f2c86cbe083
SHA512

a0f5683ec15d2634b50aa6c06cace4169814d5418be5164d4916f9e0a4972cca4c8dfded9c247ec003a278016090b159837f9df6fdb245751b41fbcf71d234e6
SSDEEP

384:WojEgLqM5SMe600M3knWE7RkJvYluYjwwqX1:tEoUjqdWEcYNc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef9e5be353fcea5e5cf148056fa4a75d_JaffaCakes118

Files

ef9e5be353fcea5e5cf148056fa4a75d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ