0bdf98a8eb2b403274a5b7caa527ebdf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bdf98a8eb2b403274a5b7caa527ebdf_JaffaCakes118
Size

668KB
MD5

0bdf98a8eb2b403274a5b7caa527ebdf
SHA1

72b9e496dee7fb7ff77b1acdb5975af175de131b
SHA256

08a3a72e618825a74148d16bc9dcae36f7a44283c90c41670168e03f6532a4a9
SHA512

c1a2f341ef901097942f2d20ee9491bb43442413f961f4f8a298024d5983ece4858e00b84cc07b893eec8199de5be4de7d9ac6a55e04469e65be5a98a6352a11
SSDEEP

12288:WEBUuJHcvdNf33omxqKjgNacH/jrAYe2PHE1j:WYFJ8nfHJVMXr//k1j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bdf98a8eb2b403274a5b7caa527ebdf_JaffaCakes118

Files

0bdf98a8eb2b403274a5b7caa527ebdf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 466KB - Virtual size: 465KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ