0f97a3ecdec564851f79bac767cfde46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f97a3ecdec564851f79bac767cfde46_JaffaCakes118
Size

57KB
MD5

0f97a3ecdec564851f79bac767cfde46
SHA1

0e942b5a32ffea38d974e5cee0a4181bfaf7a0bc
SHA256

9180905f2ee0f708a48c95251d1df539506f4f2cd6ec7604c5459336d7629688
SHA512

e097c392b2f016fa29a7a713b1b79d34b51c7464c733c1d0f493cb7976f5982b7dc40ce485729348adf4c8c3bcc1815c1c17564b86e1b61b9709f386365f7ed4
SSDEEP

768:rIPUACs7CPgopq1PgDIbyrgvfUWeam/SnqyrmqASN1NpPU/n:GnCooBDIbyr+UWHm/WqWyS3pPkn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f97a3ecdec564851f79bac767cfde46_JaffaCakes118

Files

0f97a3ecdec564851f79bac767cfde46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.scpack
Size: 4B - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 515B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE