0ddaaaa3dc40d49c18f07556e647a260_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ddaaaa3dc40d49c18f07556e647a260_JaffaCakes118
Size

331KB
MD5

0ddaaaa3dc40d49c18f07556e647a260
SHA1

b768c33e9ae19f5d9f9af7bf7d6a8b0067926a30
SHA256

3e6597121de7fa3fc71070cd505f7aa00c3df04f7ebfc2ea2b5761e12c29dafe
SHA512

c5eeebfeb59c19ee1f3b76a9186d19e9858d13c74cf3eb63718962ab1855c514efabb139d9bbf070dc4f4ecd88bc4636fbc591b38a574fce1afe952bd8f0f077
SSDEEP

6144:vRT9Ogn82Kf1Oz6nrYfU6++kBUEFEPBQzY1F056g4CxS5q4HnGU:5PkQorjjkQzrsRVHGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ddaaaa3dc40d49c18f07556e647a260_JaffaCakes118

Files

0ddaaaa3dc40d49c18f07556e647a260_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 924KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 318KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ