efb29c066b4ef92135a4178d96adb053_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efb29c066b4ef92135a4178d96adb053_JaffaCakes118
Size

25KB
MD5

efb29c066b4ef92135a4178d96adb053
SHA1

65f384753da97485056672d4433462b800df78ed
SHA256

a43ad9cc900824fda19f2fb65b8a62bce701b6e6c53ae12c191907947a448799
SHA512

b36ec01a73e4d6acdf85b1f6e5c3828e4bc237ff3ed4ccb5b676b5062fbb92555a3852d234d24c7d8f62f0d32918bad5eca0f70f5a8966471007c0a0979a8d22
SSDEEP

384:pL0519mta/7qkfTCr4DmFvfl2QKeHHExKx4iwiKb7HRKlSJ4EYn2GR98Mzy:4ota/Hq4DmFvd2p6EsnOJ4EYn2VM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efb29c066b4ef92135a4178d96adb053_JaffaCakes118

Files

efb29c066b4ef92135a4178d96adb053_JaffaCakes118
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 209B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ