0e85ae2121f202877e008828c1d1f66a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e85ae2121f202877e008828c1d1f66a_JaffaCakes118
Size

26KB
MD5

0e85ae2121f202877e008828c1d1f66a
SHA1

0f4aae2a75e72e1eb7221cb4faa48deeeafbedfc
SHA256

96fa4a2e91cccc1390c17ef644e1798ff4023f60c5cfe0aff6ed7583ffa2db5e
SHA512

7d009d75f2b64a7f8493db61bff05458a1cdd460765db681cacc07fdb324bd336e0769b74b3d0a68d1cec58607062adff2a13258944a4968a6a229d8c47c429d
SSDEEP

768:tC4wM5jM6yLS92MWq14krFEYc9isAniU96mT:t0M5jM6yLS92X5krFEYcEJ6m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e85ae2121f202877e008828c1d1f66a_JaffaCakes118

Files

0e85ae2121f202877e008828c1d1f66a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

KORL
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

KORL
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE