0a4c3d6904840276243d323096b746c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a4c3d6904840276243d323096b746c6_JaffaCakes118
Size

128KB
MD5

0a4c3d6904840276243d323096b746c6
SHA1

252187f9815b08575874da0e10e407a9636ff227
SHA256

97c9ae25c3a34fb19c71661e8c0d83f9793244c7eaefc6a5da50c1526a375ad9
SHA512

db42761ad73d323e6427fbe0da175732d7f168a6b8232634a1a00df17b3c197336bdc01ebc3f32b47ac30a2341ab8102c9467003bf5c45377a229745b699af6a
SSDEEP

3072:exRwBbXgAZ4+2Q7glYe+34ot7r7EBgmMsEncNYAoCwpt:ejGrgAm+2Qf4NfMs7JEt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a4c3d6904840276243d323096b746c6_JaffaCakes118

Files

0a4c3d6904840276243d323096b746c6_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.zrcgo9
Size: 2KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vsi459
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gw2x3r
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t$0odb
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 918.0MB

.data
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE