efb368720b5dd4a97ea8a450ab9b5177_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efb368720b5dd4a97ea8a450ab9b5177_JaffaCakes118
Size

102KB
MD5

efb368720b5dd4a97ea8a450ab9b5177
SHA1

2aafcf25383d5497a8cf074d1e2d99c1e7f6e440
SHA256

aa82573a1f967e1c091b7bc09d217d052828b995c0c2229834d18f45cd627954
SHA512

91f13e123d65f7e8757a4cecb36a9e6db007c64017e966ddb25fd8b4eec417cde7d345b6abc6c8d65fd88d0d2b07e7e01b681dea8000aded4ba1395dca874be1
SSDEEP

1536:feHYtxuYfKzCxIDrwJ2g6zIu+QXXd5DTKQY0NSmizV45AnvTbzFzq2gZ:2HYC8Kzlwn0HdkQ3SmizV4Kfzo2gZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efb368720b5dd4a97ea8a450ab9b5177_JaffaCakes118

Files

efb368720b5dd4a97ea8a450ab9b5177_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

grwww
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

xwwtm
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

wdmcw
Size: - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ