efdb476b94910066b0d2dc27955964ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efdb476b94910066b0d2dc27955964ae_JaffaCakes118
Size

147KB
MD5

efdb476b94910066b0d2dc27955964ae
SHA1

02276f1cf50d1d56e633736739c17fe6a495ca7e
SHA256

1eefe4ebaec7fbf399b234cd23c35edfd2e7f9553cb42e4c066771a7ba84aff3
SHA512

7494d01c6866cc472d3fc21c5981978057ecc67b9d2be202a3ac6583e31d97769c5426276f9595caf1dbf4917e08470fae6b4b057dfd88ae3bd3a9a3308f39f0
SSDEEP

3072:ckHBgIpJvropWEgLFBuOh3Kyg4tJcq6X51brPcGu4W4g8gNQ:c4BgIpJvP5rVgQWXLBW4g9NQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efdb476b94910066b0d2dc27955964ae_JaffaCakes118

Files

efdb476b94910066b0d2dc27955964ae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.edata
Size: 27KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 69KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ