0f9c46f76c11a04f0e36fe02ef47cad7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f9c46f76c11a04f0e36fe02ef47cad7_JaffaCakes118
Size

160KB
MD5

0f9c46f76c11a04f0e36fe02ef47cad7
SHA1

395906ff5ef5ed2f720aa38f7781b351df3ac0ca
SHA256

a6b64d20678217f6b1ca6cea479f09f388c3f53dae2bfa64c85a6440c8c3afe7
SHA512

ddcee111c83f99c196637a1bec4976f851b07ed7743640d2bc6b34872707dacb18dfd93d08ffdfa7e7ac5e42200389a52eada559be3cc394980821855e1107c6
SSDEEP

3072:dAeVkAYKrCK+kIYgG8oxnl0cuCZ/T904p+pCNYzq:deKokf8oxnl0cuCLdpACNp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f9c46f76c11a04f0e36fe02ef47cad7_JaffaCakes118

Files

0f9c46f76c11a04f0e36fe02ef47cad7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

_lpmko0

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 325B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ