f0e789401f0241152691c67218a19d68_JaffaCakes118 | Triage

Sharing

General

Target

f0e789401f0241152691c67218a19d68_JaffaCakes118
Size

349KB
MD5

f0e789401f0241152691c67218a19d68
SHA1

bb08b3dd40d71d3908b4623e53aa728a81c95174
SHA256

eb099f0c70cde5af0179afaee2cb94c0d77dde9fbd29566cb028bfdf5b8b492a
SHA512

adc849e6e410ba18dd0761451505b270cff41d89d55891703ca90f671d8469288fd796e15d2fd7d52e1c70ca22c964804a5b00259b587a9de1a3fbbcecfdee69
SSDEEP

6144:OujLtlQQBrZJ0mMm0P7Px3XN7oa7jxhKOd8A36W0fTV5n:TtlQErZJGm0zZNxQfA3z0fTV5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0e789401f0241152691c67218a19d68_JaffaCakes118

Files

f0e789401f0241152691c67218a19d68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 288KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ