efa207dd058b3934c728a5a120c59aa0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efa207dd058b3934c728a5a120c59aa0_JaffaCakes118
Size

315KB
MD5

efa207dd058b3934c728a5a120c59aa0
SHA1

6d9e9611926345a3366aeeee6eb7e44154abe4a4
SHA256

67b91a149359549bfd68354b19262aede7682c32567e9bcf73694fc192902ee7
SHA512

a95b1d3a8f2677d713ce770e1b9016ef33bc9a270c8f5c82027a93ff0eb3024093582459bd5662295ffbe4fbf0106d5de5d7efc1fba3baa224028ba7f8fcd0a9
SSDEEP

6144:Hq3gCcSoqWYHtSlYnI+tnYDcMbY4FmNzNwm+MhUaQxO1BcC1c1:Hq39z1NtnI+1Kb5KzNVN9Pcn1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efa207dd058b3934c728a5a120c59aa0_JaffaCakes118

Files

efa207dd058b3934c728a5a120c59aa0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE