0fa3d8acd95d6479bd24912c963a117a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fa3d8acd95d6479bd24912c963a117a_JaffaCakes118
Size

97KB
MD5

0fa3d8acd95d6479bd24912c963a117a
SHA1

16c9c768507d65eadd52eb53b3483d12d2fafb18
SHA256

af6c6fae302fa1539ce84fb598659e4d1d41bb6b26105578d594df7455271cac
SHA512

71fa07636b20a778bc362b14a7e2d7257adb502d3575a187e78a9018085f52a5caead7a9c9a54479485ce2da9348936004315970c752c99e74c3e5747c15c10e
SSDEEP

1536:+mjoPfBtukdwrQweq/ETtD3ofW3eB1C7SJeeOwFLZ:BoBIrQweqsl3+ceBA7SJesLZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fa3d8acd95d6479bd24912c963a117a_JaffaCakes118

Files

0fa3d8acd95d6479bd24912c963a117a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 664KB - Virtual size: 663KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.6MB - Virtual size: 19.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ