0e1728c233086419c9434814a7b97d75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e1728c233086419c9434814a7b97d75_JaffaCakes118
Size

231KB
MD5

0e1728c233086419c9434814a7b97d75
SHA1

f8f3d52f5806847976fc7e533d084ed0a5f41f9f
SHA256

06d4b7479767bcacf1e5b20cf9ed82301b30e8c7444c6be88eeef73697124c92
SHA512

883f4f8ecea0c05cbd128329912102744f327e26578a1e5afb53e2d88c96db6204a7fd6da90809ec5d97de61d12ad840dd287179fbc231b0cd4131c9be55bff8
SSDEEP

3072:sUdIJgJVa6H11UdZ3dyCFchTUDUVoGwZOsIP1JjOSTYKqvMeaD52elzltgdZH2/a:hIJf2/UdZtchw/zZX3aD0etPcZW/yGT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e1728c233086419c9434814a7b97d75_JaffaCakes118

Files

0e1728c233086419c9434814a7b97d75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ