0dcaf0afdbd4877a039014c9baa7aab6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dcaf0afdbd4877a039014c9baa7aab6_JaffaCakes118
Size

5.9MB
MD5

0dcaf0afdbd4877a039014c9baa7aab6
SHA1

ad431d6266e7756cd00261d44bcbcb3a5c0f0aee
SHA256

f645029f9182c070cb20e14e1c5ab32dead093b0dfe191fd8f56585a1a97e058
SHA512

9fcb1e20b1d99844169d8288b4734fee4273579f18cfae9d023de745a05c35ea6a764732b1c6bb6e0280b92151182a279d13dcc7204858fd1ed412f9bb4b50dd
SSDEEP

98304:RFLWj5OST81RxGTBzpwB0w1/1yOCbSByF5y0EyCjQOtOJLzfwm:ujDiH+zpwB0wJ1yzbSByFk1Ucm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dcaf0afdbd4877a039014c9baa7aab6_JaffaCakes118

Files

0dcaf0afdbd4877a039014c9baa7aab6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 433B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 68B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ