0e835d43ebad7eca4dff288de3f88e15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e835d43ebad7eca4dff288de3f88e15_JaffaCakes118
Size

1.0MB
MD5

0e835d43ebad7eca4dff288de3f88e15
SHA1

d29b34795d629e4573acf6f82267c472323145e1
SHA256

d5146b7395dc3ca12168b3056d070bd4a0102f8823a2a73630c83c1fbebe1575
SHA512

d98ededfba4b28dd9bd5d0b2e99f1dfa4cdbe3ebdd4ae97564cbf07de8c2621351200ba5ae9fd87dee894683ed286fe899872af6efabf39e92446ebd53773d87
SSDEEP

24576:Qz7m7n3WkkxNo68T/yTj3bO4MH0/L74s/95L:QTQ6lTDbO3ML

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e835d43ebad7eca4dff288de3f88e15_JaffaCakes118

Files

0e835d43ebad7eca4dff288de3f88e15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 862KB - Virtual size: 862KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ