0fbcd0794d2e14a916712bc238749ed0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fbcd0794d2e14a916712bc238749ed0_JaffaCakes118
Size

639KB
MD5

0fbcd0794d2e14a916712bc238749ed0
SHA1

332498330ccb27145251ec24ee1461dde2af2948
SHA256

2f065e7ab015d62bd2e1b9f289a4fa0ed50d9ac89c9cc1ef97ee4d8722084b7a
SHA512

adde4914272ac9efc79f662ed673f8424befbaf4ff0700f44668a425f08a40f6cc6b7035ddbb67a0a5283841720fd780324e807265360c464b10b4be7d293731
SSDEEP

12288:Nu1UzE8ypLrewp4+rtlRJp5KMWja65svigUdkKMBiiF8:NuqyQwp40tlLiLrOv9UOKMp8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fbcd0794d2e14a916712bc238749ed0_JaffaCakes118

Files

0fbcd0794d2e14a916712bc238749ed0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 556KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��4�
Size: 66B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ