0f5404b9833a896fa8ed84408f55d725_JaffaCakes118 | Triage

Sharing

General

Target

0f5404b9833a896fa8ed84408f55d725_JaffaCakes118
Size

470KB
MD5

0f5404b9833a896fa8ed84408f55d725
SHA1

5bd0bb292f09f9b7d60bfed62626b580bff7dc49
SHA256

81649c86374dfca6c331ccc546f4be914fb10fd11a9b1d9b4222e829681f97c9
SHA512

2560b3dd9f5f49c6ed6e9e258e287a17f636eaf14a1908c500844f7f78c2e2d5ff116a55415ffe9f6d8f57abcd115db452d1639bafb7d6525e6cb8212042733d
SSDEEP

12288:7IchrC8lRQ4fiuUN16mDSiBdePXeMI5hcda:7IcFCmDiN1rSgdevJOhqa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f5404b9833a896fa8ed84408f55d725_JaffaCakes118

Files

0f5404b9833a896fa8ed84408f55d725_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 1KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rbss
Size: - Virtual size: 771.0MB

.reloc
Size: - Virtual size: 460KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 467KB - Virtual size: 468KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE