0e89653244487d64e9a72e600af984bf_JaffaCakes118 | Triage

Sharing

General

Target

0e89653244487d64e9a72e600af984bf_JaffaCakes118
Size

52KB
MD5

0e89653244487d64e9a72e600af984bf
SHA1

f9562653cb106d87bd9f2dc8e4f42c244d78879f
SHA256

54c698b5f8df6472b03a1a6efd4e87d0b1f4782f1cab366e3e1f113d2f8c470b
SHA512

56050edca217d448451d2da3356b90a667813366023f788301a3f55e0d580d5955ce1574082b5cbae956547ffc2c041d25ff49825e18b023724b00ea262c85f0
SSDEEP

768:8XiyIX23zTVqgSHdZPMGEo+/XII7+1/3XsPhGSywiip7Bt0+jCajgwp8:ciyY4RSHdZP6o+vq9XsPsSywFFt0+jC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e89653244487d64e9a72e600af984bf_JaffaCakes118

Files

0e89653244487d64e9a72e600af984bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 593B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ