0a444e5052c50495a11b519aa6f38957_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a444e5052c50495a11b519aa6f38957_JaffaCakes118
Size

29KB
MD5

0a444e5052c50495a11b519aa6f38957
SHA1

6cdd70af1955796ffc33ac8e20a7c6b837f9b689
SHA256

c673bb559b3e7038fb74d80285bbbdffe94644c11ca0ffe8ee9d6b66cfb86661
SHA512

0fd3cff9aa7b0aa0c62c9ba7468f6436cbf4ec33b1b7b34dbe2cddee3acabf65d7362dd3b428b1a9941271905efba135ae30a641a8ef218a8a52af0ff0969031
SSDEEP

192:xEEOTXoWQFRXRwTblf4Iuodbllm0q7yooU2:xEEOLo1REBhplm7Fs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a444e5052c50495a11b519aa6f38957_JaffaCakes118

Files

0a444e5052c50495a11b519aa6f38957_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 968B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 434B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE