0e3d99ca3d6ce3cc80681ca77704e81e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e3d99ca3d6ce3cc80681ca77704e81e_JaffaCakes118
Size

655KB
MD5

0e3d99ca3d6ce3cc80681ca77704e81e
SHA1

882bbf2c53e4aba117c0fa0f97b8c0adaefc9c26
SHA256

31a7dd3a7a67053fce0ebbeec51fd9f5f9e8bd2fea3591d914b31b8c58c8e19d
SHA512

b5fa12bd9a4adad03ab5dfea62dc9be4bf60da3064bba15d252efb6d391c1348e03826238eaeb015853816721d1ef24c260e7e97d3eecf46f62953d3b49e12c1
SSDEEP

12288:/ESqJwbBEE+tOimc2xwlqXs4zUmvycM6xgNyJ6DsZuhEP60dIIFazZyun23:/EdYj+jmc21lz/VnxgAJxuOCciZzE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e3d99ca3d6ce3cc80681ca77704e81e_JaffaCakes118

Files

0e3d99ca3d6ce3cc80681ca77704e81e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ