0dca31d7c11dcfe05fe0a25b27892793_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dca31d7c11dcfe05fe0a25b27892793_JaffaCakes118
Size

550KB
MD5

0dca31d7c11dcfe05fe0a25b27892793
SHA1

f0c70e74fe44bc5862a14680d9c84b772bd0f43a
SHA256

364e0d1d9a63739f7a3acb0a345413618543698c6734fbd86e6d37cf912f257e
SHA512

bb2fbc5dc3fe5ed17f63d8fe38f881e11726ace6b33bfcc4227abbf4f5c0d0ff5816b67b1404ca726e4ab5cc3e818765c6f6359fc3774c72ad94ca92f7d6dcbf
SSDEEP

12288:FRm8PggcwW6QyQzUWlv0IXCaYcamn/Y5VS:7J+wW6QyQJlcm2camn/d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dca31d7c11dcfe05fe0a25b27892793_JaffaCakes118

Files

0dca31d7c11dcfe05fe0a25b27892793_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 463KB - Virtual size: 463KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ