0f402d914f6797e8c40fd0f21b31e1eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f402d914f6797e8c40fd0f21b31e1eb_JaffaCakes118
Size

113KB
MD5

0f402d914f6797e8c40fd0f21b31e1eb
SHA1

2b710441bf470e4c6eed19c742783f9c2f1d734d
SHA256

125da1988575de54cf548d932cae2d7ad20924b6d43f5a89c34794733de77732
SHA512

207094e7847f9854ddfa0aec5a2cf37ae9592b232ea13cccd58e5bd3150eaf4339afbe89306680b1b173fd4d1d33e1b9f84a1e1021a6c6b2a7373429a62216e5
SSDEEP

1536:XykVodHUOjqV+U9+VCR2d2lv+ozPYf1ZIMFSMDj2eJi8HF5D/M0C:ikmd0OGsrm5Yf/Ij+j2ai8HF5DE0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f402d914f6797e8c40fd0f21b31e1eb_JaffaCakes118

Files

0f402d914f6797e8c40fd0f21b31e1eb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_BuyMeat@4
_CallMe@4
_SellSomething@8

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 254B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE