0d365d1ce3e1bf41302512ad0435cba0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d365d1ce3e1bf41302512ad0435cba0_JaffaCakes118
Size

169KB
MD5

0d365d1ce3e1bf41302512ad0435cba0
SHA1

bcc45a911b3e0c7c8fdc703dce4ac356a68d2f97
SHA256

479aa8d8af476129b7d409608e02355257f3180aa51a8e8621adc3dc483b7256
SHA512

884827c3eebbfa45af5941fed14bd314f1b1b9062bcd7b8c8c10460335504f37ed41bace720f13f22d5eaf520ff805db42f1eebf3a65c87409912b55fe96eecc
SSDEEP

3072:7jNoXAycfBqVqcTuYQEW56f/4hkkb6z6YP+pIsCBW66gWGfsBmyofJtk+qU:cA/fBqV5ak7uYPInOWnKsVofz3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d365d1ce3e1bf41302512ad0435cba0_JaffaCakes118

Files

0d365d1ce3e1bf41302512ad0435cba0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 309B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ