0f2d59cb6960dd2ffad18c8649d1b471_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f2d59cb6960dd2ffad18c8649d1b471_JaffaCakes118
Size

7.6MB
MD5

0f2d59cb6960dd2ffad18c8649d1b471
SHA1

6655899febff3474fffbdbaa5e7cd80f11df3255
SHA256

48a408cda4743478fe0fbcc6f4cd917ecfffb2c8a32a1d64beb2c8ec05543af6
SHA512

16b624c6a222d5db7377bf87d7f6aba1ea87c70ce8462dd28a8dbe49b07c812c52387149f869ada2d82ab73fc07184f368357b85f32c752ce088f867550cc0d7
SSDEEP

98304:PGHjLN2jLNmHjx5jLNmHjnd2jLNmHjx5jLNmHj3:oL0LCjLCELCjLC3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f2d59cb6960dd2ffad18c8649d1b471_JaffaCakes118

Files

0f2d59cb6960dd2ffad18c8649d1b471_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LWY
Size: 192KB - Virtual size: 192KB