0fed94599a9542a8ce0f4e6a693d2ef7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fed94599a9542a8ce0f4e6a693d2ef7_JaffaCakes118
Size

544KB
MD5

0fed94599a9542a8ce0f4e6a693d2ef7
SHA1

024d7befecef6287191938094237edf18b48b6f6
SHA256

daac2b3eb835e5cebbde86dc051924561299a69acad4ec975b81c30f4823018d
SHA512

7167b96a575e9c61326ccf11f50554a33847b90fdf3f5a70a5bb5f2427bad836b3dae2ea2c11550f9fdda2a215f3263a1df9cda09e5a14d5e84889223668a4f7
SSDEEP

12288:msMyeH+1E2loKYN5KD7gJFqRsEvG9DXtUR:mH+qSoKYN5ogJFqmEOd9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fed94599a9542a8ce0f4e6a693d2ef7_JaffaCakes118

Files

0fed94599a9542a8ce0f4e6a693d2ef7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

system
Size: 504KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE