efa2efb60981ecef4d70f530408d3410_JaffaCakes118 | Triage

Sharing

General

Target

efa2efb60981ecef4d70f530408d3410_JaffaCakes118
Size

439KB
MD5

efa2efb60981ecef4d70f530408d3410
SHA1

c2c7974890c0bab31948374a601bc7db972f4ec6
SHA256

4cdb25bd36465aefe2ef058bfe06c4c30d8e4e8af24557051ade7583f8e7fa2e
SHA512

d4d4e068c0b865850f859a50f7520c1a8ac1a87e524b9835a87057e399e33b38d86f246d74ac56671436f9a1627e07d73df29ce05936110d06c0580d726b166b
SSDEEP

12288:c7LL5AqhXbgIXl3MhKHDyyWTh1kXugekyf4CrO:cTCqZfDg12+3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efa2efb60981ecef4d70f530408d3410_JaffaCakes118

Files

efa2efb60981ecef4d70f530408d3410_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ