0eae3ea310778362c56f7dae519cefb6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eae3ea310778362c56f7dae519cefb6_JaffaCakes118
Size

956KB
MD5

0eae3ea310778362c56f7dae519cefb6
SHA1

a1ebb8e3c45237cc5fc42e00e0437d098e3a4ffe
SHA256

6fa422b19ec047dd074629eed04adab413caf90f3a74ab43948b53f57f403ffe
SHA512

77fc976fb0d5de28f49b313c46670e74d25c8871fa0b4ca73857a3c4ed7eff3d1108c13afcae2cca5381d4f22e041fc6eba95362961bf46e7d51f4f4d06aea57
SSDEEP

12288:/tDsDqdu6UdiKqRvrqP9EuBm9+UVFm3i5i11Kz+faaSuNPIo61NyxC:/tgDqdu62qRvrKBVUVS0Q9aGNPX6q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eae3ea310778362c56f7dae519cefb6_JaffaCakes118

Files

0eae3ea310778362c56f7dae519cefb6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 433KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ