efc4dfa8cbbf40fbde19f306796cad91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efc4dfa8cbbf40fbde19f306796cad91_JaffaCakes118
Size

309KB
MD5

efc4dfa8cbbf40fbde19f306796cad91
SHA1

553b05b9159fab0bc90605d1f8fb4637499eb6dc
SHA256

6551b7b492d8a793a83dbe80f066277244e9945f6110e942f1cafab1232b6e33
SHA512

b1c339e84fd95304f13fd062d4937789e7cd67541b7d1429d04c8baa2524c8aaf4d2248785be7c92f470ea99721b7cd55dbdfb9dfa895f8c6012c0528836bb58
SSDEEP

6144:zDM0NJ9zxgO46Fokvqm1UNYY05PoHzVbK6n45kdKckMlQneAFHgwSDeTfKSsLRMZ:zDPN7zJ4JD0BWs6nPUcJynvtWSsNMgq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efc4dfa8cbbf40fbde19f306796cad91_JaffaCakes118

Files

efc4dfa8cbbf40fbde19f306796cad91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 315KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 441KB - Virtual size: 880KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 788KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE