efdf4a8025436bcf21900e8cf6987c7c_JaffaCakes118 | Triage

Sharing

General

Target

efdf4a8025436bcf21900e8cf6987c7c_JaffaCakes118
Size

44KB
MD5

efdf4a8025436bcf21900e8cf6987c7c
SHA1

c10269401a4f2f9318848d262fd4492cf72abb78
SHA256

a12ce4ab99872c678b4cc663a88c8e8fad800e2ff4ee8151cae547ccc477520a
SHA512

1807349181a4d61585d1ff2d5d8ec627890676c15cfbe0d72aac0cca6954e38717bc115d4ed7914db43bd26ac656b19e76f07f5abbd5990fcf60d16b428003e6
SSDEEP

768:iSDMqQyzyQ2TseidLB9UB6ntMsoEMxTfORTZ3oX9vHd3VXbEr3XPmWTDX8/XZN4Y:VDMqVzyQRhd1HVMR83oX9v9AXuWH8/Xn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efdf4a8025436bcf21900e8cf6987c7c_JaffaCakes118

Files

efdf4a8025436bcf21900e8cf6987c7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ