0e45bc1d5232ecfcbfc03193362f09d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e45bc1d5232ecfcbfc03193362f09d3_JaffaCakes118
Size

1.9MB
MD5

0e45bc1d5232ecfcbfc03193362f09d3
SHA1

9f713530fdf30d21250ffe97060b9d37a0a6e9bc
SHA256

7c430915cd0550eb8ad8b7e7d6f984ab0350e8a987b7eaee9f988a3632d39ff4
SHA512

3ffb01bb14303414ce3a78e0ef7299278389c45566f58af19a7e2afb3e2da2f16d85295c8f1c6985ddccac566cd4863be6f98bccd9dd1c0a35b2fd8f1257f539
SSDEEP

49152:P2xBOMWBclrKvOJt84oct+ZtOagujb4xCM5FAGLar4+a6RRc:PjfBctKvO/8yIgujb4M0rLQE68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e45bc1d5232ecfcbfc03193362f09d3_JaffaCakes118

Files

0e45bc1d5232ecfcbfc03193362f09d3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ