0d92a3277e1d990ee6c3b595b0b79d32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d92a3277e1d990ee6c3b595b0b79d32_JaffaCakes118
Size

313KB
MD5

0d92a3277e1d990ee6c3b595b0b79d32
SHA1

485c0477e63f0269567f19bb6786a52cb4cdee9e
SHA256

e54108ecf4a2f83e3030e2add8faddb8654ddcb5d1413aeab453434b79d7d7e5
SHA512

6e4a9e55a1872cc5b32f0f94fcfca15337f17af6e444a8823351fe00e2fdc092403a4c64b47aafeb606c95915cba1482c168c5960f063ef94e8d8c097c89391a
SSDEEP

6144:SShseKyyQICk7q8wsRycfq9TF8arVgub7i+VrjlBoi8nfQF/bcyc2:jhsek9B7q8whcfqb7uuv9Vw7w/bcyc2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d92a3277e1d990ee6c3b595b0b79d32_JaffaCakes118

Files

0d92a3277e1d990ee6c3b595b0b79d32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.kvmpiyc
Size: - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.opazmyb
Size: 311KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zfrjpgb
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE