0f5ab2d4ebcafb7eaab31e56d9ba1613_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f5ab2d4ebcafb7eaab31e56d9ba1613_JaffaCakes118
Size

823KB
MD5

0f5ab2d4ebcafb7eaab31e56d9ba1613
SHA1

cca6c8ea6cf4e4966b12f04f6ba7e6277358736a
SHA256

fe2a8dff25a7539e5811368e49de476d07df64f6b8e0cb7c597c9435d7a7a6da
SHA512

0b45efaf462d006ec167fd089b3f6dd5b9d5388bae4150fa09465acf91bddea9602c8809ec50052c59776dc583e7bf7c9eed09028f46d2201db7085dfa3118e2
SSDEEP

12288:PeNv5l+vxbI7lPRrEMW33csKFEMuXwW4TrU+2f9eblTa6aSYraTDZmqhcT:Yj+vxbwRO3csKeMuAVEb9ebBzaZqhI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f5ab2d4ebcafb7eaab31e56d9ba1613_JaffaCakes118

Files

0f5ab2d4ebcafb7eaab31e56d9ba1613_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 722KB - Virtual size: 722KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ