efab430eadb2e570afa0b147c02d2ba3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efab430eadb2e570afa0b147c02d2ba3_JaffaCakes118
Size

4.2MB
MD5

efab430eadb2e570afa0b147c02d2ba3
SHA1

984049a2f0b22ed62b48c977076e7f09f74764b7
SHA256

d435a76435f7536a8a45ea5bc0d6e1daa356403a9a407902ad1c80b80b42a9a3
SHA512

7690c82a1a5e063ca312aefcc160689252328ba41831683e090151eac9178433e476f670ef50bb7d2ba13929d37bc1f286b934a730dfb1083af6f9d4a57cead4
SSDEEP

98304:QVaPGggFafXUebRSXhH6W/sSCy+SBPB3RrBGltsv1sS68:13VRWRXsSnVpBBrwltSL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efab430eadb2e570afa0b147c02d2ba3_JaffaCakes118

Files

efab430eadb2e570afa0b147c02d2ba3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ