0ac58abbd49d290c719dad12c65b45e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ac58abbd49d290c719dad12c65b45e8_JaffaCakes118
Size

28KB
MD5

0ac58abbd49d290c719dad12c65b45e8
SHA1

91a346d1a5943a325864715dc838539dbeec6e0c
SHA256

87f6d7ce242a73af117540cda1edfbffbd1a2e4b612e00c3cb27eccdd6dca766
SHA512

c4ea069c6235e6e1aa4f072c15784d2b6881d3e985fefa084bb285184fe57064e44566cd0c0821858500061f5981fb8ea2418b1ab6e09b734309d537e91f54af
SSDEEP

768:oK5ma88K+C4Q8n695BInJrluWRTEFo540tKhpe0c8oIT:oK5maPK/4G7q5rTEFo54QKhp5LT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Pedido.exe

Files

0ac58abbd49d290c719dad12c65b45e8_JaffaCakes118
.zip
Pedido.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ