0ed8da4470cc372045e5392cbd25f6e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ed8da4470cc372045e5392cbd25f6e8_JaffaCakes118
Size

1.1MB
MD5

0ed8da4470cc372045e5392cbd25f6e8
SHA1

9516d8d6c12aef6da91efb4647b6d35c3c74bfb1
SHA256

b9f1eb44f2c58a9ea497c7a8ea7b1cc141216f916ee9c2106fe3128d9967d9ad
SHA512

9cf8bd385245e2e7967b897af49a9855000abbe714cf7e6c8e02d878eaf3d4dde4a9f31ba9037a6a41e08332e8d49c141599111f3ea3ae5c5e4a75678d1c6d57
SSDEEP

24576:D+pm0iBBO354x8R27VEgMBZ/JeQi62Ki9YLPY9HNj0AAJ:D50eDWgMBZ/JvihKiy87U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ed8da4470cc372045e5392cbd25f6e8_JaffaCakes118

Files

0ed8da4470cc372045e5392cbd25f6e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 464KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 588KB - Virtual size: 587KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ