0fad14c53c639df57381649af88b6362_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fad14c53c639df57381649af88b6362_JaffaCakes118
Size

407KB
MD5

0fad14c53c639df57381649af88b6362
SHA1

21e95942b05a86ecb8981da9c3a4340779233016
SHA256

1e205d2ed86be99d2ae9ba1d185938bbf9839f514cd008b03fd8560916667191
SHA512

e539389bf2cda3b50d0a4e6d3f6675395d514e9acf0f892434ba312b087b7c04369a765e5a14389f78d60f4df3a80802bdeefe3bf35cc52d7109ab8b3d217a59
SSDEEP

12288:19B7L4uGwUkif8fbbPfI4kJUPM77Uck34Sl:hLZG9kif8fXXI4k4M7Yck3r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fad14c53c639df57381649af88b6362_JaffaCakes118

Files

0fad14c53c639df57381649af88b6362_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 418KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 171KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ