0ed47bc15dda58902a6a6d9a7382df94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ed47bc15dda58902a6a6d9a7382df94_JaffaCakes118
Size

480KB
MD5

0ed47bc15dda58902a6a6d9a7382df94
SHA1

f33c18d1b36e9d4e18af9912205173040014abd4
SHA256

b41ee1f3f307f37dd5831db8acccc51a2c24057d286721f1b30ffccd3e8e1168
SHA512

48a97eb5d5651808e776f6f420712998df9d4bac3c395c5bf0852d91a5123209dc6d86437efd45755c9346a43be3b89aff39f6165802156f29b32ed67d4f14f1
SSDEEP

12288:skUSkA+bsvwRyBorUvDqSqGCfDrtKXAY9J+SrXzb4AcZvOoO2:skU5cwUogHqrDQXAGv3sVOov

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ed47bc15dda58902a6a6d9a7382df94_JaffaCakes118

Files

0ed47bc15dda58902a6a6d9a7382df94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.itext
Size: 5KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 736.0MB

.lijlnf
Size: 468KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ