0df806a10d1573827dcce76ac76fabed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0df806a10d1573827dcce76ac76fabed_JaffaCakes118
Size

604KB
MD5

0df806a10d1573827dcce76ac76fabed
SHA1

eda09e8a6e542d29015360ea79bea6cca6760116
SHA256

0fb0047f55d9b5cf8f5f8b8c58d817d0780ab20e10c668c0f7cffb8e90e85f30
SHA512

c6b814cd8b587e88637ed79105bc18dc78b159dce0448a87760e2c58bc42589a8c9bbca24aa2c04831a4f89915333d90365b171e9706738f973d58392e879b74
SSDEEP

12288:9bMIOL+YzLxeUxQtdKM/7jrBCoSq5AS7vVEASW3tdRVeqx:pjX6sUx76nooJOUdD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0df806a10d1573827dcce76ac76fabed_JaffaCakes118

Files

0df806a10d1573827dcce76ac76fabed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 460KB - Virtual size: 459KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ