0a0eeea89dfdc7c3d0afe3a91c77bb84_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a0eeea89dfdc7c3d0afe3a91c77bb84_JaffaCakes118
Size

17.8MB
MD5

0a0eeea89dfdc7c3d0afe3a91c77bb84
SHA1

91825d366981a08439450a5a18512905b501a4e8
SHA256

10661c5e649368033309c55ac182294e0b2bf2bf51927b63851f05689ffcbcc1
SHA512

ea6e27528b6eb99c595d7aa266e611353f584a0b995f1b95af27fdbcdb81d517b82991c4ea6ce00723bab98654af7c590920b0207b660b36acc64fa68f643135
SSDEEP

49152:dAIRx42rbulHg8S/su5yCP7lvAC8tW2zjlxf3aEsLGFkaQ0THEfZj4rF4:dAIR3uHg8SNNpYi2zeEskkR0TH21qF4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a0eeea89dfdc7c3d0afe3a91c77bb84_JaffaCakes118

Files

0a0eeea89dfdc7c3d0afe3a91c77bb84_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.delete
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15.9MB - Virtual size: 15.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklstb
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE