0f77fa4236403dd949bca2c316c0e8b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f77fa4236403dd949bca2c316c0e8b5_JaffaCakes118
Size

1.7MB
MD5

0f77fa4236403dd949bca2c316c0e8b5
SHA1

8c620af572d986f6b7b9082df73478e3fec2b40b
SHA256

1de83d726a8e8343aa3a6850b7350114b80a64e31942859f9ae1213234ddb266
SHA512

d1b72450440a4af0386f9fd25ae2bc664f73f031033ae7b344f20f185c20321c18823c09fca2e7355b3aa32eb5c63bf2b8e917d0e4fbb24a8810fae3a3854bd7
SSDEEP

24576:vglfr1VOVWZHyZX9fSjLZ5REqmdFAGCEUm38G4NO2T2Cgxp2Q/JN/qbMrycU4vLq:vqfrwnqjLZ5REqQum3nCqAQ/vEEvLD9w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f77fa4236403dd949bca2c316c0e8b5_JaffaCakes118

Files

0f77fa4236403dd949bca2c316c0e8b5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ