00e81fc96a6f1b2bf484b00ef3a1e972_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00e81fc96a6f1b2bf484b00ef3a1e972_JaffaCakes118
Size

9KB
MD5

00e81fc96a6f1b2bf484b00ef3a1e972
SHA1

189f6be76c2c368362e2faca18da58d34287a565
SHA256

8471efd6a8e0fba16c44521670329bd6b7255b87e0db2ca0f547b9dccea5eccb
SHA512

0a261052a0ec1b82c71430ecea1246cf8fd5259f0acd5a45801b924f61a5c6a850a9e75b25794ade51b8ec42f92f61b9084520980689dea32f77286eb92e908c
SSDEEP

192:n2YGc1Zl2+VAfNxl1THs6xgzgVGjPlRXZL766nQAxNuz:DGcMJxDTHfRmRh3Nuz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e81fc96a6f1b2bf484b00ef3a1e972_JaffaCakes118

Files

00e81fc96a6f1b2bf484b00ef3a1e972_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 17B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ