0ff2a84d74432186acf02819f2cdf64f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ff2a84d74432186acf02819f2cdf64f_JaffaCakes118
Size

1.6MB
MD5

0ff2a84d74432186acf02819f2cdf64f
SHA1

cd8ec4a06c6c1b67e8ec718b34b46112d5e62a42
SHA256

453d390565a52963723593a918dad5be7205b64184f00a19843aa2e4c2958d9c
SHA512

ca9e6bc662a979e3c1e0d16a8535c4c35a451c2c52dc331be2483ac9dded4913f084bf955a407ffa8cf16024b911436d3995cfc51f0c4e70e88e5762d21ebf07
SSDEEP

24576:BVEtk0QFPVe+8PMtncuSzpd6g/gsTXs5ZhOgf+IdbBx63/D2p615ZdeW6xOAo7NM:ik0QFN7AYm6g3e8Iw3/ic15ZEW6xOAuq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ff2a84d74432186acf02819f2cdf64f_JaffaCakes118

Files

0ff2a84d74432186acf02819f2cdf64f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ