0fd3b16a7ec6ab20c4e79976b922f89d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd3b16a7ec6ab20c4e79976b922f89d_JaffaCakes118
Size

538KB
MD5

0fd3b16a7ec6ab20c4e79976b922f89d
SHA1

0361e8309e42cd986f280940b30e68e239f70de4
SHA256

6c960b29068eed29e506766fd3c37a4e7651952589295002318febbdd8b0838a
SHA512

9bbe1fff591bc55082d40bbff78be7bcc38f8d12d9ed7688c53ebf66e9579fd39ffa2a58a68f5946399e10a45ab0dde327975afcf71de910bfbd2d97bd5bf251
SSDEEP

12288:3M4W/QObfUXbeOR8X7w9Z7VCK6TyYtN/E2Jv3f:KXvg8X7ozCK6T5tH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd3b16a7ec6ab20c4e79976b922f89d_JaffaCakes118

Files

0fd3b16a7ec6ab20c4e79976b922f89d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 451KB - Virtual size: 451KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ