0d604456d693ead29881557040b5f12f_JaffaCakes118 | Triage

Sharing

General

Target

0d604456d693ead29881557040b5f12f_JaffaCakes118
Size

1007KB
MD5

0d604456d693ead29881557040b5f12f
SHA1

ccc284276c24fd46ae0bf256a540575b08716726
SHA256

5b0d9aafde1891e720e4c9de4646c89bd95825fc1fe94e0bb8f382ac5dade118
SHA512

9a6bc6d5907f2b401f76d46a35e46966f8021f479bfec9137cf70dc8abdb07b1517870d659a95ba0f5360518364ce28ac9534b7611eccc47851ab935a87777d0
SSDEEP

12288:9Vy9D2mUy3B7Pc5dNyPtfic86pGQ+pL5izeFEgRvp2mLyr1yLhL9xpGZPAIEYMyb:f81UyxgRy1rpGQ+PHXvp2m+IN3SA1aD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d604456d693ead29881557040b5f12f_JaffaCakes118

Files

0d604456d693ead29881557040b5f12f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ