0e01755c1b94ecde94314b7e97394779_JaffaCakes118 | Triage

Sharing

General

Target

0e01755c1b94ecde94314b7e97394779_JaffaCakes118
Size

710KB
MD5

0e01755c1b94ecde94314b7e97394779
SHA1

e9fad457e4e5206ea671e90e218787b7bfb3859f
SHA256

9a28286f8b4525bd455d2cb009b5035a3dc9a463f7069f319f42ad598a52ebde
SHA512

48783acda1be990ba7f4806b86a9f109defe35dc2e59e9a158d5caecd43f17a857e4e125b30f25b4db0e84bf513c1e34a630c11dcacfc6290db9e960b00adb14
SSDEEP

12288:UBv0DCZilV8VHaLHh0vspmoWyrL71yn2bzN1i0aPQN9qRZBPnX31GHf8wwG99ibw:UB0kwV8V6LhvpmCnzbzizMYRvnX37wwK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e01755c1b94ecde94314b7e97394779_JaffaCakes118

Files

0e01755c1b94ecde94314b7e97394779_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE