00f85da9d355dc9e26c170f2b80d2aff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00f85da9d355dc9e26c170f2b80d2aff_JaffaCakes118
Size

615KB
MD5

00f85da9d355dc9e26c170f2b80d2aff
SHA1

6e2b9016e4689370e194e71881b3d3823a9f76d3
SHA256

7767c2e581dc309c52a8fe39f0e430a6883a148900ce391ed16f4343c524a6c3
SHA512

26c8667cf183f596144857e94d52ab2e805eae70e6fa802533e6c3c7ad6cbc78fe93828144bfd1971b694dd2f0928c5592aebebb39b783b1abcfd6d018ff0c8f
SSDEEP

12288:C1whTgQsVJnQYRzP99X/0xhkAezRPKfPrsNbGeo8bVwJzuGJ5PP:qwvsVBX/0xhkAezRWA5G98bVyf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f85da9d355dc9e26c170f2b80d2aff_JaffaCakes118

Files

00f85da9d355dc9e26c170f2b80d2aff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 508KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ