0eda8482e9cedc132fca0b982194c51e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eda8482e9cedc132fca0b982194c51e_JaffaCakes118
Size

7.6MB
MD5

0eda8482e9cedc132fca0b982194c51e
SHA1

09676e2de5f709c4d82355178faec6e7e8c693fd
SHA256

58d8d85d12a41326f3338b01525433283ede1811826f54040c5582cd2dee0820
SHA512

ccd11dda45e64ee351ba2bc37f1de6f87541973298ac51575bc690734885c35ba8e9725cac72bb6ce518a1bf0cbd169bb447f5115df48ba088a9936f44730902
SSDEEP

196608:Ff05HtdVYYE+VPlDQ60eVVAYHh9PzPDySibZF4BEK7f5u1kjl:V05zmh+FlPfpHnPjNK1Kb5uejl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Minecraft-Installer.exe

Files

0eda8482e9cedc132fca0b982194c51e_JaffaCakes118
.rar
Minecraft-Installer.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 68B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ