0e25dfdd74aad0895e40b83d1a93f835_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e25dfdd74aad0895e40b83d1a93f835_JaffaCakes118
Size

157KB
MD5

0e25dfdd74aad0895e40b83d1a93f835
SHA1

6ee1c4bb5c4cf2d5a325ff07da9b02737f5017eb
SHA256

970b9bed5c198cfd0e636a731823a76b3d1b4d48b617c6e3ec81b6a65c245307
SHA512

697274538617eadbcce8af079ce39f99514e1fce6354edd838c99952e84ce22109e5a1e0ba0a57b34e5774acd9cb0e05d3bf524fa2762fc8d8c4cd09203ceb06
SSDEEP

3072:84UXCg//RoZDY8nz2UMZ6iG5DHr6U7kwCTyWxElb+oCqtfG7C2rjnaW3tXJ:+CYoZDYdUn5DL66tCTyuEtkRrZ9Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e25dfdd74aad0895e40b83d1a93f835_JaffaCakes118

Files

0e25dfdd74aad0895e40b83d1a93f835_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 755KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 334KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ