0f63161622256bb7e2f41a075b7d4017_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f63161622256bb7e2f41a075b7d4017_JaffaCakes118
Size

944KB
MD5

0f63161622256bb7e2f41a075b7d4017
SHA1

a5dfbe372bd2e1b80c9af2459e64b5ffb9ee0131
SHA256

75f9d7d9cd3212161303fc270d5e0951096c3057362ae3196c59b59aeebcb6f6
SHA512

30bfc7c5bd9bd6f5da46a43065263cd6304079c9f46820fa94f9183a403f77ac7269f36f8cfb8571b15c4a0199260fb559d98ffb872cf1c05c5b86876ad14a1e
SSDEEP

24576:eQvpboskyP7lRbAs5roIN84rTda7MGFFe:eSeExRb7rb/rTdaMGXe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f63161622256bb7e2f41a075b7d4017_JaffaCakes118

Files

0f63161622256bb7e2f41a075b7d4017_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.ogm5zj
Size: 1KB - Virtual size: 536KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yjc7ei
Size: - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 3.0MB

.null
Size: - Virtual size: 412KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.info
Size: 404KB - Virtual size: 408KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE