f0e910fe4f18abca802b3bfe20a5860c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0e910fe4f18abca802b3bfe20a5860c_JaffaCakes118
Size

303KB
MD5

f0e910fe4f18abca802b3bfe20a5860c
SHA1

263f91cf76dd26f5468d3db02a813bce96bdabb7
SHA256

00dbb4fed6bbfc76cff2eb312a28ed2b38c15cbe2e8abaf7ab54196ca44ade49
SHA512

af033e02b0d31fb156d45fdfea3539d02fbefcabd9b851a65049a4c057d722d9b68c02f884cc3474b7ab336fc949cd8076ebfa0dd3d7dedeb45508f9b5116682
SSDEEP

6144:tZhD+2TYsBT839feJYhbZsiOAis4Ob4nILKCLMRAIExEBCpz:jB+2TYss6gZ7w5IVMPMEBCN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0e910fe4f18abca802b3bfe20a5860c_JaffaCakes118

Files

f0e910fe4f18abca802b3bfe20a5860c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.itext
Size: 1KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.null
Size: - Virtual size: 3.0MB

.edata
Size: - Virtual size: 464KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 277KB - Virtual size: 280KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE