0e3f5a8da1fe1ed59caeea6c411aab5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e3f5a8da1fe1ed59caeea6c411aab5e_JaffaCakes118
Size

7.2MB
MD5

0e3f5a8da1fe1ed59caeea6c411aab5e
SHA1

93368847c8cc73894dcb7e3eba59a0f883ff8ce3
SHA256

4131542a61d0654a758198a1da076558dfcf5bd2c84ae911e477feea28e266a5
SHA512

88070b6041ed65a0a39306fe4368269238fa86940676db0eaf6fd97fdfa38c4d71283ac091b5c90b700b58f95ae785012ff3a97cb32063078123d2b7cd166e97
SSDEEP

98304:CGFALnnnnnnnndDEJmu4hSb+3Hvneg1sogL3VdOQKRu6yQ4NC:CGixT1S3VEQKA1Q8C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e3f5a8da1fe1ed59caeea6c411aab5e_JaffaCakes118

Files

0e3f5a8da1fe1ed59caeea6c411aab5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

GetEventIdList

Sections

.text
Size: 368KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE