e0f9839fbd598b6a2c3c290057545cda_JaffaCakes118 | Triage

Sharing

General

Target

e0f9839fbd598b6a2c3c290057545cda_JaffaCakes118
Size

721KB
MD5

e0f9839fbd598b6a2c3c290057545cda
SHA1

ab74a05248235683f8f61fbdee68d39fa98a9da1
SHA256

6f9be6027a5fb140b83c288f832a230481398c2ac95de30e671ef3662336cfbb
SHA512

4b129cb08479d13d2e6ac109720ebe1a79056b6b90b94bf0fc8e47b6319494126c830a1e6b7a6206b90f1818999bf2bdd9b3a0ef348db1b30510e74e122f6eee
SSDEEP

12288:XqNRWtGWTqHO+oW3HVjIwBY0dVoEciFLE20Qs8XPPt6dEmc3G5Kbl99CTgQAWeBt:XqNRWtGWTqHO+oW3HVjbBY0voEXFLE21

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0f9839fbd598b6a2c3c290057545cda_JaffaCakes118

Files

e0f9839fbd598b6a2c3c290057545cda_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 704KB - Virtual size: 703KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ