0f9e4ae7529123054d5c2d9ae9d931ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f9e4ae7529123054d5c2d9ae9d931ea_JaffaCakes118
Size

229KB
MD5

0f9e4ae7529123054d5c2d9ae9d931ea
SHA1

5eb0fd0eafab9a67542c1144bf615b2ab0d4228a
SHA256

4b6e7614cd26f3329ced425d5c70aef4f2f3de0ca80c46648296b8350443252d
SHA512

8c15ff846ac7da17308611f3d585d7f1e7e474c348292b27bd39bfa6c02d697dd41928d46d32acb5aa3f479f34a938698050f6d4f3b49d739177c8b0efc3bade
SSDEEP

6144:Dff/xZKy+5tCM4W3LtLkg4cuzp3C/1D+H3cHyb:DX/DU73LtL/4dzpy/1asS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f9e4ae7529123054d5c2d9ae9d931ea_JaffaCakes118

Files

0f9e4ae7529123054d5c2d9ae9d931ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 189KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 942B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ