0bf28d34b5ff0867a97326abf69198dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bf28d34b5ff0867a97326abf69198dd_JaffaCakes118
Size

337KB
MD5

0bf28d34b5ff0867a97326abf69198dd
SHA1

b105a7466d17a241dfc1d15d3b35b73e6356e40f
SHA256

45668b671e86ed6b79bbd7af18774f64e9ec477579a59deaf15fec628c5dcb8e
SHA512

2b0e94b4b3dcb21590e5a142019d8c3658d3f9d4ab0610fa7ecc755d8d913d47aeefed0e5c04d564146e2450c83a2221aa6914f4ba3eba1eb739fc00ed071333
SSDEEP

6144:zIugepnRVdu+llCqme5sYXtvFTNxidTxuhxCm7X:ERerVdfj19BEtxxm7X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bf28d34b5ff0867a97326abf69198dd_JaffaCakes118

Files

0bf28d34b5ff0867a97326abf69198dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 267KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ