0fec733488d65d170d875b28f168ebf5_JaffaCakes118 | Triage

Sharing

General

Target

0fec733488d65d170d875b28f168ebf5_JaffaCakes118
Size

66KB
MD5

0fec733488d65d170d875b28f168ebf5
SHA1

5e24c2bcc9b4157b00c13a4b4a441398f99b86e8
SHA256

ef5cb14d11b4bda3a80756b48a070c7f938de25e2d77642c0f0b4f848ba8addf
SHA512

844c7bdbea6a2d7aaa233c821986fffec6ee8381b6537373b570b1a61aee1e8ad54b86c4c4b311d00fb288a7a0d07c34b0a75f93e94381c38d62f0d7605fc0e0
SSDEEP

1536:qCQMI02A7K2jX7GtGa3ErnwxItSUwNwMo8fgHw:Jr22jrmG+ErGItSUKwMoK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fec733488d65d170d875b28f168ebf5_JaffaCakes118

Files

0fec733488d65d170d875b28f168ebf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ