0fb5763acef81d6bc2195ea20e39d4e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fb5763acef81d6bc2195ea20e39d4e3_JaffaCakes118
Size

79KB
MD5

0fb5763acef81d6bc2195ea20e39d4e3
SHA1

8cfffd80b4279b86f34ee8daf3082e011fbef72a
SHA256

6f0ab6d5bbf07c301056400c4a360014d84372ee7dd4bbe2b0f70db490b8e3e9
SHA512

102225aa5b3e33765b6ead7fd99f41e7639514602b14510d13b558f111261a151f22a2f6ec69f15139740a6da8eec6752759da136a3014ceb14014da70c9d947
SSDEEP

1536:xr3G8zWWlaqymr8Vq2EQDHduPv4iQzYZMQdgFHmv4CGnXcxNYYt5kltkkpvAsvQ4:xGoWiabmr802bD9niQzYZxCmvAnM/7sJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb5763acef81d6bc2195ea20e39d4e3_JaffaCakes118

Files

0fb5763acef81d6bc2195ea20e39d4e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 301B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ