0b2ab7b7ca73fcba1ad1eef1868e4c98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b2ab7b7ca73fcba1ad1eef1868e4c98_JaffaCakes118
Size

423KB
MD5

0b2ab7b7ca73fcba1ad1eef1868e4c98
SHA1

50ffe91b9a8726ebd22f877fba8ca4af450b650d
SHA256

333a815bcbe1f66f2e0a6b891c0b0eeb4ab53464ee540dd6b4f6fd1df8d72b4a
SHA512

669dcf0bd8a35f27cfb6c60222911c7325357a92085bb8d28eba56662674ef8f6658a8cf602d4db8262e5fd3877bdfbd1cb22a55feab3e4828a8bd1ab69e8e6f
SSDEEP

12288:ysHIB7QkKRaug8yeikCykaAOl13l0Pz8MBqIk:ysHU7+h5yeilykkln0PzZBqIk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b2ab7b7ca73fcba1ad1eef1868e4c98_JaffaCakes118

Files

0b2ab7b7ca73fcba1ad1eef1868e4c98_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ