eff253800375f6bf15718442d4783705_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eff253800375f6bf15718442d4783705_JaffaCakes118
Size

1.1MB
MD5

eff253800375f6bf15718442d4783705
SHA1

aebdf64342025536e3dbf587cffb30e4f5f7012b
SHA256

7a985e2cacf9093fcd84bb34c815e5560aea0530034890fb1ba662c87100a892
SHA512

2085c09df614e1f38f5c8b92cf9984cdad6f5c79f9ce7b481fe2577fc02c656b3d090d960fb2409948bbbcf75651ae49191af0a304cb440938a719bf08e4cd8e
SSDEEP

24576:7L2EGNy+4wXBSPMOUO5BeoEEEEEEEriKfK:7LssPK0Befid

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eff253800375f6bf15718442d4783705_JaffaCakes118

Files

eff253800375f6bf15718442d4783705_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 480KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 584KB - Virtual size: 584KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ