0ef7c491e17edb595ef048e4ca37813b_JaffaCakes118 | Triage

Sharing

General

Target

0ef7c491e17edb595ef048e4ca37813b_JaffaCakes118
Size

538KB
MD5

0ef7c491e17edb595ef048e4ca37813b
SHA1

6e833de6ee2788896a09b667a027b7860bb48c4d
SHA256

1c4d09ced4dac2c95c50158d853ea3b39c7d737cf3f0b13f87b2659528b3fe87
SHA512

4394b3b1c3bd70a7779263be3451d6752bb2857b6ea0f7e9ce34c66a463e83318dcb721a2433f3a7c171b926a80d30ac0bdd40444a53d173ff0147799a04cde6
SSDEEP

6144:YKCWklqdJMV0GM9cYPpX5xFgj2D52OTr/fwTer6P9O1iLHnNyy2IGnQSGFametri:tCWklqm0hfXwOTse6lO1a0RChkmeti

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ef7c491e17edb595ef048e4ca37813b_JaffaCakes118

Files

0ef7c491e17edb595ef048e4ca37813b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ