0e75ef9cfe67d7bd68cbab00bfdd6827_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e75ef9cfe67d7bd68cbab00bfdd6827_JaffaCakes118
Size

81KB
MD5

0e75ef9cfe67d7bd68cbab00bfdd6827
SHA1

aea6a1a542531830d6fbc33378020739432a0b41
SHA256

ce5376dcfe23604e0f9afa865fd70ee06ff0f5d5922acc21be8632ecea13ed40
SHA512

a36f1cfe763e4f844fa8ea4c52bb5aee38ca97743b7798006cba0606758650703d2d6dff602f996bc62c01877a563e7398d4ace540ff5ba17b16c01025ac6340
SSDEEP

1536:VqUd6cj8X62MTaUMMnMMMMMQqvuOYQIYQDvmISfYW8uns35gmYlflhfZAQa/wwGS:Me6cAFUMMnMMMMMX7I7DvmOOK5OlZh8z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e75ef9cfe67d7bd68cbab00bfdd6827_JaffaCakes118

Files

0e75ef9cfe67d7bd68cbab00bfdd6827_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE