0fac5892dde1fe6895a7e5ec8a3b0323_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fac5892dde1fe6895a7e5ec8a3b0323_JaffaCakes118
Size

31KB
MD5

0fac5892dde1fe6895a7e5ec8a3b0323
SHA1

e424e70fc7b4ffd383fcaea8987a66a464064302
SHA256

819503d2f6305251913adce50188130fb9808542d5489d0034fc290b502aa233
SHA512

04589752accb72c8efbcbf7a4012d8bf23312d8c0ed09cf94fdd8ae5a68851c012ed763e6077903a3cc904f478e3dc4ad6189aa74564e7bc4ca802cbaab8f1cb
SSDEEP

768:QBPN/UiZS45qiMGZzJ90GG0MSOWfPglp4OyilpIetS:QBPNRS4x/zn0WBmCOyilpjS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fac5892dde1fe6895a7e5ec8a3b0323_JaffaCakes118

Files

0fac5892dde1fe6895a7e5ec8a3b0323_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ