0e928e1c610b6f56aa60d5c6c894f979_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e928e1c610b6f56aa60d5c6c894f979_JaffaCakes118
Size

34KB
MD5

0e928e1c610b6f56aa60d5c6c894f979
SHA1

ed1243af7ab5d511120a0473a9079e9e900b1b58
SHA256

59fea27fd2e84c651670789a168d81f66afe0a2d5542ca2d10dc8723263b233c
SHA512

158d752db7ed0e9f746487fa4e6d14bfbb7101fa64b8a1c37320a61af12b2ea3a023b1d26de22101f2478d0c6951a26a78b03ec4083789a89559aa0d6c3e0fcd
SSDEEP

768:IjxaGWBhMmyp3ISAEWhdcxZ69akx0FGzH5PJNPPhjQn3JxNfHhwC:IjCBLypAx3k64k8eBBEZf/hwC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e928e1c610b6f56aa60d5c6c894f979_JaffaCakes118

Files

0e928e1c610b6f56aa60d5c6c894f979_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 659KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ