0e5954ba7b9cb146e217210243a04415_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e5954ba7b9cb146e217210243a04415_JaffaCakes118
Size

1.8MB
MD5

0e5954ba7b9cb146e217210243a04415
SHA1

b54ef7d754bcee994a8a67cb12a2ab482c21f9ec
SHA256

2e921b700a2a7c6500ce5cd20a87faccc654ea738d14d539d85cb186d1e3d231
SHA512

c0b789c7e6515dcc39c9668ca4d2f2e50a88449bc1bcb64abcc2cec1bc93afe01663698714e36cdcd671852e2d8b9628109ea4e9034dbcfe3c7a054194b6f995
SSDEEP

49152:tDS6Gyo6InKvwzCIOjvfgQyNXDx3Okv/cb:tDt11jwGlvYHNXgkcb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e5954ba7b9cb146e217210243a04415_JaffaCakes118

Files

0e5954ba7b9cb146e217210243a04415_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ