0e83c94686ddd3de8e340c73bee3e773_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e83c94686ddd3de8e340c73bee3e773_JaffaCakes118
Size

692KB
MD5

0e83c94686ddd3de8e340c73bee3e773
SHA1

c7dd65e36226366adcefa023a4e793f538cc46d1
SHA256

fb3b70379a720322116647baca17a8abb096e726326f5194ddfb4333ae9c4869
SHA512

bfa65f9c68032ba55b35098b7a754a93d9a4d7a7c4f5052ba9a5fa918f14225fb976df09022d9e3e27556785216f1bc6ec737d078afbc23fcc3f06c080c754c9
SSDEEP

12288:y7I8Mdn5pXVhOOIN3rWfFeIjffH7o8lBRXjIjt8i2K/gRa:y7H8n5pG3rWfFe4fH7/RTi6Ra

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e83c94686ddd3de8e340c73bee3e773_JaffaCakes118

Files

0e83c94686ddd3de8e340c73bee3e773_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ