0b16f205bac245fbecc0b5e7514805dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b16f205bac245fbecc0b5e7514805dc_JaffaCakes118
Size

104KB
MD5

0b16f205bac245fbecc0b5e7514805dc
SHA1

c5df84cbd0df84e8f9b3e4e9f07ef5e82d178a01
SHA256

7bfe7f616c17fa13fc7167f3899f19da9d1fed74f8005b82e27e6765bbe10d60
SHA512

08c6486e712271dd3c65a3f544573c94b410756b90042c5c82a91888dd9bed6195d84bc399fbe8c603c21b8a17c96ddf9184af8aa776ca0e08d0b377a1bc2b9b
SSDEEP

3072:AfM8phxpwLKzdkSZXdh0KkiPHZWSjLYFW+3:n8RKKmkvzkCHdjL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b16f205bac245fbecc0b5e7514805dc_JaffaCakes118

Files

0b16f205bac245fbecc0b5e7514805dc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rsrc
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ASPack
Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ASPack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ASPack
Size: 678B - Virtual size: 678B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ