0f575ed0509a1d4a1d28b600ca817031_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f575ed0509a1d4a1d28b600ca817031_JaffaCakes118
Size

157KB
MD5

0f575ed0509a1d4a1d28b600ca817031
SHA1

bf7db4b1a9cb8400683983cee3a3234b71b99c89
SHA256

1bd1ec28f31c4b34a51f70a71670c94fe7615e43b17870be5d59d41c90a275ce
SHA512

5555f73505b2be0624c74e5b4fd269b41746d0b3a36296d1166d2a36f2b49aaa980e7b4e408d9516ecb69dadc35497caae9a7bd5597261bebaa10dca7c7f31f3
SSDEEP

3072:11eCOiH9RiZAJ4SvUs+CLr9u/L4+kJDzPi47MbNEtUWUajWzkf:1cCOiH9vcHFL41H7ENyRUaj1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f575ed0509a1d4a1d28b600ca817031_JaffaCakes118

Files

0f575ed0509a1d4a1d28b600ca817031_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 290KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 414KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ