0a94c086b494b0b64b98a4625c304875_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a94c086b494b0b64b98a4625c304875_JaffaCakes118
Size

18KB
MD5

0a94c086b494b0b64b98a4625c304875
SHA1

3c417df2041a7ddc2b6da4cb2fe3b9f5a5e05c8a
SHA256

0db982f58af86da4a356199ef79b4d3afac5a364a7b553c3c792c25a78a8de53
SHA512

eea8ba3f4921abf9ec0856fb59bd10ed11a7e1dd7bbe78aa342a337e08bc89265556bfc80d71b84f0b80d1c2c64910e393ff7240749f527b11780a39987d9669
SSDEEP

384:LKSywRBvN5MPToFDMwCaN1o01g/2XrE2dFKUAppQw9CTgRO/1WHM:LKpwRBvfMPTOMwCa3o01g/2XrTq/pV9q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a94c086b494b0b64b98a4625c304875_JaffaCakes118

Files

0a94c086b494b0b64b98a4625c304875_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ