0d4e4da3a4fd3e51eff9cd4e43a3a1d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d4e4da3a4fd3e51eff9cd4e43a3a1d0_JaffaCakes118
Size

117KB
MD5

0d4e4da3a4fd3e51eff9cd4e43a3a1d0
SHA1

45cf2b84f5478dac76ce81083ff99f7c97926c99
SHA256

aee5e882ce475b39c5a3cfda3fbf8be2f6192a41de885fe97299976d681d909b
SHA512

09f4c110f6e27e49055624c7336b9d098292ff73d6e676aa75416fe5b69e82ac7bb3aad724d7c4066206f2b5b78adb6f69c50076cb2762e5cfa0f5a747193484
SSDEEP

3072:E1ZTc/////kZwy4lMU/5Vehxn4L9bK3L44Q6W71t2H:ELTc/////kGyseM9Gq6Y2H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d4e4da3a4fd3e51eff9cd4e43a3a1d0_JaffaCakes118

Files

0d4e4da3a4fd3e51eff9cd4e43a3a1d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ