eff73bf9cd045f93569c17c818224e6b_JaffaCakes118 | Triage

Sharing

General

Target

eff73bf9cd045f93569c17c818224e6b_JaffaCakes118
Size

791KB
MD5

eff73bf9cd045f93569c17c818224e6b
SHA1

61a4048e1dd4e5bb0f480502354ebbcfa7c955f1
SHA256

7ff5afc035c449acfc93d51153b5548c9d34c5653ca0a9d4e09d83f9136574fd
SHA512

f5d3d652658d8776188b39c32bf9a5ee6d85887df3bc90156d432f02f238a15b064b7bfb8cced544c583e4a9dfe99028e05292609cde6c2f30d26bec4cec0317
SSDEEP

12288:D7DpxxH+HlnGaeiWOhBjyEPBKzW5QprdJwZ8pvG6Xq+S+/V:D7v2lGrMfmAKzW5Qprf7vGIx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eff73bf9cd045f93569c17c818224e6b_JaffaCakes118

Files

eff73bf9cd045f93569c17c818224e6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 627KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ