0feb05fdefeb93e1bfcbfa29fa473387_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0feb05fdefeb93e1bfcbfa29fa473387_JaffaCakes118
Size

807KB
MD5

0feb05fdefeb93e1bfcbfa29fa473387
SHA1

51eaad326a075ea237c2b754bc86a98d6b3dd1bd
SHA256

57620a2357f67431af69c4117bae244c58760138a07c35aff580541d94cbc3f2
SHA512

516899f3c67440f81f8de7900488db5b91f94d873c9065638e0885328b3626cf9eab85568c7a170f9cd250d3041445ec1a57116fb59662cb909238865243719e
SSDEEP

12288:EFU7k/U5/lgYMLDkxD8CESq3o1QL7gFU6x6gnrnnzsfvtH+dblTbYhFX/NeJJIJn:sYk2yYM/kBa+13ggn7zuH+7bY4eBNr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0feb05fdefeb93e1bfcbfa29fa473387_JaffaCakes118

Files

0feb05fdefeb93e1bfcbfa29fa473387_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 379KB - Virtual size: 378KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ