00f254dd530c50cf234f55a3d6522e76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00f254dd530c50cf234f55a3d6522e76_JaffaCakes118
Size

750KB
MD5

00f254dd530c50cf234f55a3d6522e76
SHA1

9c4cdc1a34a8729d0ce888828ecd5efdcf746e47
SHA256

4ea5585d7de7e901378a6d48de197d36e8e80ee517d33ca6e543ac704ed5d412
SHA512

3bfe1ac4ab55da260e89c834737054d544691020aef8b554aeb531e085189b55821b9d3be80539b1f815fdb9f851f7fd329039e1a23dd635b8fcc6c9588546ae
SSDEEP

12288:51b5wOEavbKFTnIYqNauNW865Dn34ZTuMfcnriSv5v9Nww7+AxFVW6S5bxPWu25b:51b5wMvOn3qzQDnqTuxriSvlP+uWtJZg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f254dd530c50cf234f55a3d6522e76_JaffaCakes118

Files

00f254dd530c50cf234f55a3d6522e76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ