0e962f61054f84472d086b2c07d5811c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e962f61054f84472d086b2c07d5811c_JaffaCakes118
Size

30KB
MD5

0e962f61054f84472d086b2c07d5811c
SHA1

199a737cf5ae08defa4bfbb020a14d8d33b2aeb2
SHA256

58ab97fbfc6ee30256ee923b777345cbb61bd7dcc2efb28adf04044ffa624bb2
SHA512

2ff28e87c0246d156e423dd6ea07472576ec875a9bbda996348322cfdef83b0a770a4310ff8c0cfced4145236d91470c9899bbe55b6e81097cbe7f5aa7858156
SSDEEP

384:d716pMXvqBlCQ7dA+Jl1BvwTvEAWJDR88PeoxA+1EEPzg6BdSPudbaG/0:OpGvqiQbFvwbEeoxAqggpaGM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e962f61054f84472d086b2c07d5811c_JaffaCakes118

Files

0e962f61054f84472d086b2c07d5811c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 694KB - Virtual size: 694KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ