0afa553fdbd7f5003776b0028d606a52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0afa553fdbd7f5003776b0028d606a52_JaffaCakes118
Size

3.6MB
MD5

0afa553fdbd7f5003776b0028d606a52
SHA1

dfebb7d4d8da99f9e4169518ba3cd7eb8fab50cc
SHA256

16f734eac6b1360142b4f4602aa7543b0af21440e0c6d06f635f6f685b6d951b
SHA512

5b844df2382fbfca581e12d6230e5f5e09ed999c9cc835ff007ef0b5bb6e804b5c84a684a40e92c2ee8ff015684d1a6e297da7ed982efd07c58b8658480688fd
SSDEEP

49152:MOLo0HWDtA7/rF+l1X4/B4DfCdCSRsj0Zuur1T75YBrmNtqL0LnG+v980:MibHWDtA7TY1454DKdCdJg1ArmNtIl+Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0afa553fdbd7f5003776b0028d606a52_JaffaCakes118

Files

0afa553fdbd7f5003776b0028d606a52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 893KB - Virtual size: 892KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 30KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 276B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 842KB - Virtual size: 842KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ