0b50b4386be18f84fc6832489eb48653_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b50b4386be18f84fc6832489eb48653_JaffaCakes118
Size

188KB
MD5

0b50b4386be18f84fc6832489eb48653
SHA1

59d9f5b27ab54ceb3fba170040ac71a63365f5dd
SHA256

120307cba095636bd819aed054c2d97831bbd392bf27cb929305eb7157927ab5
SHA512

8d91281bcc156fc4bf453747696af9538a98930e4ded51c9abc301ade95c0a5091ff65baea6de6a66a301cdb4367d7979f02e0e112b1f17a3df4cf45ed7a09ea
SSDEEP

3072:NNGOBpzGlYPwi2KOikmIRyZUbWgMr1uus9vIjsgQ3WQra7HRvX9O:TxBpilYovjlROT69vIwgOwHXO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b50b4386be18f84fc6832489eb48653_JaffaCakes118

Files

0b50b4386be18f84fc6832489eb48653_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ