0fd14e57912161c0cb94849ff7f3d605_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd14e57912161c0cb94849ff7f3d605_JaffaCakes118
Size

808KB
MD5

0fd14e57912161c0cb94849ff7f3d605
SHA1

bd6afbaeddbb8dcac80db7e4c398d5046e3f13cd
SHA256

b3a526efed53866e3605ce8fcb17194fafeba0e73f9793d047f5d592eca6317a
SHA512

4d3de9f7e52977ee81539d8b497b8594aae8580794e9222878d51435165b7b0fa6838d0089c148024fc60aedcb779e09d50f8da622f46387b7f77502d8bf90a3
SSDEEP

24576:XS6Bq2BkBhGp5FRW/Q1WeH9LFImleWYSoaOjA8xvmvsrv8:CyBgU5FQ/Q1WOLFbLYJak4krv8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd14e57912161c0cb94849ff7f3d605_JaffaCakes118

Files

0fd14e57912161c0cb94849ff7f3d605_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 707KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ