0a489fe2160fcba819208b869a1d78e5_JaffaCakes118 | Triage

Sharing

General

Target

0a489fe2160fcba819208b869a1d78e5_JaffaCakes118
Size

907KB
MD5

0a489fe2160fcba819208b869a1d78e5
SHA1

820e89e1740f1cc67249116158592ca9fa0412ac
SHA256

03a7c6841e458c620931006fd5cc20db5c83982bf6548cb7333f9a8dce5889ef
SHA512

a48cf5eac523b29dd0824da22d011e91c33f8f2797c724ac6636f46e923a53a25a7d176a6591fb544fb8120045d879a7857c560efbfe95beb83ff99eb07ef9e2
SSDEEP

24576:W2hJw4oTUSFyUBo2NYW38iNBiZuxXTl7H56wzZUa/ZS1:hbw4uUcy+o2p8OBiWTl7ZlzugS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a489fe2160fcba819208b869a1d78e5_JaffaCakes118

Files

0a489fe2160fcba819208b869a1d78e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ