e0f13fc4d8dbcf994a530cac9887e139_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0f13fc4d8dbcf994a530cac9887e139_JaffaCakes118
Size

198KB
MD5

e0f13fc4d8dbcf994a530cac9887e139
SHA1

9c5286a72eea658ac9625eb100a1184cf61d1d48
SHA256

1f7a311120e4e0cfef91dfb559731928dc88b3a8e01698967ce00418021d69f8
SHA512

6dd4ff4a10e0c9fdaed501ba10db5b5f0d38ac2f8aacf5c1dc66e272ab9cd871f39175ed9a5a75d145d0cf87eae82acdd9b41f9b27c25f157007c2b93583743a
SSDEEP

1536:g5qVQyh9j7EhyNPE577d+ILNP16jCJQL6O4F98mL75hihbaOe4AfOBdyP4LG9LQU:/xhppW5NpNPYjCJ3rfQJzaMK4Tkx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0f13fc4d8dbcf994a530cac9887e139_JaffaCakes118

Files

e0f13fc4d8dbcf994a530cac9887e139_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ