0df26c756d89cf28840627fe8631f932_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0df26c756d89cf28840627fe8631f932_JaffaCakes118
Size

1.1MB
MD5

0df26c756d89cf28840627fe8631f932
SHA1

71845104f9089ec455cd56e66a88c07c8bdb232c
SHA256

02bce88131c24979fe038632f082afa435727e1c983e95c0943562f1c25236a5
SHA512

0381fecf3480841499d8188f32b0d8b9cd4f6e4bbc03818c53e558664eb76d3f6f3fb9a95b2d5d3aa0db471d2e7480b03cc2077b1403af58395241b9757347b6
SSDEEP

24576:cAT57r5qHpn1rffJ+GL4wZqoTFaa77zxjX6SqZWk58zFde/:cAJ6p1fx+Gn57zV+98R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0df26c756d89cf28840627fe8631f932_JaffaCakes118

Files

0df26c756d89cf28840627fe8631f932_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 876KB - Virtual size: 876KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 208KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 808KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ