0ce0fa3616f0ea19cc4f51d5695fbf98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ce0fa3616f0ea19cc4f51d5695fbf98_JaffaCakes118
Size

80KB
MD5

0ce0fa3616f0ea19cc4f51d5695fbf98
SHA1

ba29b9fc3db3d1b73fd90d77555d9d7aead64bce
SHA256

7abf784c71f31397bf57eff16773f78c7042bd97c7e1e1d93d8f1c46acb04fdc
SHA512

4436d3a8cd3a59cb5193d51a4925435e1213f6c89a97396d89e78fb6848b61c28d444a9f9a82f3842a0cba7906d8bba344810bb6d41d0f907c30e1dc70c7be5b
SSDEEP

1536:AhujSvWr1prv3VzG2I81y/bWf9cEuEL4p1XludTE351dTmmu:A9CjjVq2YWf9cK6PJTX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ce0fa3616f0ea19cc4f51d5695fbf98_JaffaCakes118

Files

0ce0fa3616f0ea19cc4f51d5695fbf98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

GyvaNinoQuho
JudeLa
Tyluse
NezoJe
XeGiliFadawy
Movyho
Babeqaxuce
Howuziqeduro
BePebutenasu

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cdata
Size: 512B - Virtual size: 213B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 251B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.odata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 263B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ