General

  • Target

    0edbfa95fc1c30e790dc45733da822b3_JaffaCakes118

  • Size

    4.5MB

  • MD5

    0edbfa95fc1c30e790dc45733da822b3

  • SHA1

    f63573a7569e5a9eb5efb3448b160ad47d886c02

  • SHA256

    abfc215e0276015adc9b3320fda1e6a6f12594575f864f4ab72ec3bda65dd87b

  • SHA512

    7ed78fdc87241addbd7f9fb1710fcb55dbc5108f7647a14210fed8d7c350fa6be3a0002de5fc6b0b1604b95262f853e0979cf581f9d8934bfe42620f4623a188

  • SSDEEP

    49152:R/C8ES8x7uudJSyOJjZBT7THl8JomU4rDObFkGJFISUKx3pAZonMCNQQg0rZI/15:R/ESy7pkBTIoBS4CqXMQg6yVCq

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0edbfa95fc1c30e790dc45733da822b3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    739246b4bb7cb3c7f0c4638fd540bda4


    Headers

    Imports

    Exports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/GHPMOVMJOWCNPAT
  • .rsrc/0/RCDATA/MFGEAHD
  • .rsrc/0/RCDATA/ROGNIL
  • .rsrc/0/RCDATA/TDSJANFRYGLM
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1033/RCDATA/CHARTABLE
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/CYEVRJKCSSSGILLTWQBF
  • .rsrc/1049/RCDATA/IMQDFSO
  • .rsrc/1049/RCDATA/PNUKNOUOXUYSJPOXVFUV
  • .rsrc/1049/RCDATA/QQBVHTOHOBQM
  • .rsrc/1049/RCDATA/SFCKOMHDXYQOKJPL
  • .rsrc/1049/RCDATA/SGPDCDCMCETKVKFPXCG
  • .text
  • .tls