0e3fef5404265c4dff46cf75b7274cf4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e3fef5404265c4dff46cf75b7274cf4_JaffaCakes118
Size

40KB
MD5

0e3fef5404265c4dff46cf75b7274cf4
SHA1

0288d8a4d99417d2c6c764486ae347bf0d8a30b7
SHA256

6d90ea7a500082e3dcec23a980cf8b7cec6eb6ac0aff9bdcba06df8ee4cef6f4
SHA512

1dfda853694f6c94560b6fb8b7ece5324df9402cdc973e680a1b354695196066912cf514f6b0f6dc2e1db4a74e350d72a03f9f4d997204ec3366f3bba1779b25
SSDEEP

384:W90x4Qq1ilQI7bed7tKlfi6Pc7vDJVmePTcNj2LdQaBRcdro9Q:WEPqmQI7o0ViXJXQ0RKrp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e3fef5404265c4dff46cf75b7274cf4_JaffaCakes118

Files

0e3fef5404265c4dff46cf75b7274cf4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ