0a805381e8b24565db1a7cfce6a13ccb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a805381e8b24565db1a7cfce6a13ccb_JaffaCakes118
Size

424KB
MD5

0a805381e8b24565db1a7cfce6a13ccb
SHA1

3c409aa4e3c5b5f2788096c3741aa809e181f778
SHA256

87a2a52cc47c55ebdb576cd550902c8fff4d1cf8c367a87894a30519c28d243e
SHA512

fc54ef079fad1e59b5aa9816fd6d61db09f2ea5737d9594d4c7ea432226bf2e298c8aaea0ce980e68e6cad45a5f7f43387f1fdbddc200107ad6b31e9a4ad05e7
SSDEEP

12288:Yh4zpBWx3Jeq+ky0dtbB4jXjqY69RZZqPCwa4/k:DWx3Jeq+kBd0XW9RmPb/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a805381e8b24565db1a7cfce6a13ccb_JaffaCakes118

Files

0a805381e8b24565db1a7cfce6a13ccb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.pdata
Size: 2KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 142KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 225KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ