e0f2df1373298de2f02e83f6adade5fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0f2df1373298de2f02e83f6adade5fb_JaffaCakes118
Size

599KB
MD5

e0f2df1373298de2f02e83f6adade5fb
SHA1

bb7905a5221fb1be1d3513204a06aa9673e2d285
SHA256

7571720ec210b6a00c4c89f47a67900ceb4199f5be8be5698ae8bac9fe0971a7
SHA512

f2aad349bc21fe7ac24f8a64b772ae716ded29b9cd755b2c199a95570313d5a062b7445091c801c8e309f8c1ae9fc954926ec93ad51ef5071d6fe7dcc5413ebb
SSDEEP

12288:eDQNpPA+xJsZD7LPB9QSCaPdKWGjllB9o7foeq5cUAJkMIvd4aDpc:eEhDxJspLPByza4WGR9+Y5cUIPIvSa1c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0f2df1373298de2f02e83f6adade5fb_JaffaCakes118

Files

e0f2df1373298de2f02e83f6adade5fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 582KB - Virtual size: 582KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ