0f61d8eed6fca4f0d45f3bfccb881e47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f61d8eed6fca4f0d45f3bfccb881e47_JaffaCakes118
Size

275KB
MD5

0f61d8eed6fca4f0d45f3bfccb881e47
SHA1

202042a55f0ac7564fc8d18d87672414350ee11a
SHA256

70943b41831afeccf33e720908178e8b4d1fd082097a53f27d2d80e7f3e3cdcb
SHA512

0f483cf8315382c692fb482adb10646f9f468d97b208764e37ba0a7cc5a571ba4c83df1b8a238b900637d60aebd64abe2d9371e1dd8bd8863b9c54c34d6e5e49
SSDEEP

6144:qvyVyBZl40pPIMHLdL1hALe+2NirdrQdZiwUKD0EN6Rk:qvAyF4wIMdoLT2NKcwwzN5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f61d8eed6fca4f0d45f3bfccb881e47_JaffaCakes118

Files

0f61d8eed6fca4f0d45f3bfccb881e47_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE