0fd17c5102014b91a4f987500204c332_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd17c5102014b91a4f987500204c332_JaffaCakes118
Size

528KB
MD5

0fd17c5102014b91a4f987500204c332
SHA1

769bc9226761d5dfaafa6f32aa965b72c25040ee
SHA256

d4b03e0ff6c97b5f42bf2f73f528136cbecd25b36e6529b5f4f5a43d7d0a900c
SHA512

494d977858aab63fcac6c257823003e676d48be496d8af0c36c2b861c89ee19bb5fd4907828e0501924161a78d7b85ce4a637976c0b3113e2ec4cb7634d0de4b
SSDEEP

12288:4tpOjxxHruEolP9RPuL7ieTvl3b2MekQRAXecqdntRcaQ7MsU:IqLWllpuPieTvV2bvRkezSak3U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd17c5102014b91a4f987500204c332_JaffaCakes118

Files

0fd17c5102014b91a4f987500204c332_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 630KB - Virtual size: 629KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 56B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ