a0dd5afc4213018bae0ffb10356d092c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0dd5afc4213018bae0ffb10356d092c_JaffaCakes118
Size

36KB
MD5

a0dd5afc4213018bae0ffb10356d092c
SHA1

83e65eaaad952330aae421b01d22d60707a946da
SHA256

62d50f1fec7dca9f38b217484e7d8fefe5ab1c149b852d3cb9db1d55728fadb6
SHA512

e66908af423b576cf619f4f410ded6287a5c739715d39c106f8fcf29f87c24745e75563fd122f25f94d36fc69012b7837e87c2739b25ba97c0f7fac7c3fde9bf
SSDEEP

384:1jaSrrlF04vNtzBwHuVjRQ4aiDU2N6QdFYRLTuBlhbptIZ0AYvLAvSzRc0+W6+hk:RaSMOzIiD99dORLTu9YxvSza0P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0dd5afc4213018bae0ffb10356d092c_JaffaCakes118

Files

a0dd5afc4213018bae0ffb10356d092c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ