0a8310e5d62fac48d0e6ac8c5fc17379_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a8310e5d62fac48d0e6ac8c5fc17379_JaffaCakes118
Size

641KB
MD5

0a8310e5d62fac48d0e6ac8c5fc17379
SHA1

a77cb25cec69e31cc9182618607a9fe9702da6f4
SHA256

1250b01ed0cac709d27f0b37d90aec5f1a53f07a86b78757f91580a7a792d3b1
SHA512

1fbf9b7738994658a24774a0333a96140319d9563c0c1775921be4aedbf8ca0ce4aa69fbba554240d6b67d3358d9c11d9c6d741b66f3df60e0f110079c82139c
SSDEEP

12288:ply83hY45sMNjnBjAWv42yMrbLsbPX7A9Lr83+:plyuhaMLn/7rUPc9L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a8310e5d62fac48d0e6ac8c5fc17379_JaffaCakes118

Files

0a8310e5d62fac48d0e6ac8c5fc17379_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ