0fee5623831e01deef7d53c06d408f43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fee5623831e01deef7d53c06d408f43_JaffaCakes118
Size

774KB
MD5

0fee5623831e01deef7d53c06d408f43
SHA1

aa278c97f965835898163bc8e1a1465c02aa688d
SHA256

5073c965572ee6fdc98f509e5bb595ab7d4669e6cb0259010a8f9ad4d3e3960a
SHA512

3e92aca99e36d3028720a6cafce5ffabedb12b4b0e8c959eeda6d0715018ba343fea54329832e6267ce4fc20974b1c8b18383832e06158e6bb320de0a6b01a54
SSDEEP

12288:GMZ5g2v+O4ozNJQT92YfTfSUF3w1F4TQtbw6mmcIzDtcETvPSgyl4B5+PSQ:GMHVvN5N69VaewfO2xNP+PSQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fee5623831e01deef7d53c06d408f43_JaffaCakes118

Files

0fee5623831e01deef7d53c06d408f43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 542KB - Virtual size: 542KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ