0fb33fc3cabf50e9663be68bbe331355_JaffaCakes118 | Triage

Sharing

General

Target

0fb33fc3cabf50e9663be68bbe331355_JaffaCakes118
Size

563KB
MD5

0fb33fc3cabf50e9663be68bbe331355
SHA1

031d474aa820513c2877e49cc8d1a59ba5caf1fe
SHA256

bb093a17f46c6e3ac10f9e9e687a34b6e6547605cac4c278f583d58d6ddeaa36
SHA512

95a742e6086439c5c8fcc48674b8cba24e26b0b601ce300e65f915516de606e6d30666c8b1e1566d9e7f67f74b68bee7064cf511c540d90188661a534839e91e
SSDEEP

6144:OEVqsG7WtjMId4pql/2fWDskeKeegLNLMbmqBdlEhCBD:OEVA7GIql/2fWD6KeegxLK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb33fc3cabf50e9663be68bbe331355_JaffaCakes118

Files

0fb33fc3cabf50e9663be68bbe331355_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ