0a99033a34a1cba0316fd4eba325b550_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a99033a34a1cba0316fd4eba325b550_JaffaCakes118
Size

908KB
MD5

0a99033a34a1cba0316fd4eba325b550
SHA1

b0a5b04e01a660426f81040bc95bf3dbdb8a9f26
SHA256

de9cb0f797637229eaa4f65266bce52474198e70881727385d8567e6dede812a
SHA512

a2c4d8571338d18cd8ab15a4444e6539352567e3c0d5c75fbe75a2b70a67660c8f3b51a9f2fdb66a5dc8d34667fb7acd0dc45788036ce906a5653d2ad8d23d99
SSDEEP

12288:iqnjNLdfwFcy9flDIvWXQOt/FAmx+aV/oDAMIuKkZSzb2QjxAXJS7OUY:JjNhBWf1DJNrgTvXSzbzk8SUY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a99033a34a1cba0316fd4eba325b550_JaffaCakes118

Files

0a99033a34a1cba0316fd4eba325b550_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ