0ed6063a6a04cdb059fb09c7f69ec123_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ed6063a6a04cdb059fb09c7f69ec123_JaffaCakes118
Size

30KB
MD5

0ed6063a6a04cdb059fb09c7f69ec123
SHA1

5bec73660cc7b9ea39456c8c7d6395b9e8e242e7
SHA256

2749868a165daf7cfd408aaf9c8b6935aff068398b632307adf28ded0dfa32bc
SHA512

ba92b01ceb64977b398abff5551eadaf194e0f61a5055a1a2c14b650bcafa3fc0e208b87d7edf60fc4457b7926698583656af7af1f2e37f1e8a6d3072bef915f
SSDEEP

768:Lcd4hT9VU5KHS15vSDfL2qo4aXejddcai2gsHuA3ZbLZIZTpq:odGTwIHASDfKN+rZi2g8JbLuZTp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ed6063a6a04cdb059fb09c7f69ec123_JaffaCakes118

Files

0ed6063a6a04cdb059fb09c7f69ec123_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.bss
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ