0b52206c24a1e7e5be17e08a76d972f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b52206c24a1e7e5be17e08a76d972f6_JaffaCakes118
Size

2.0MB
MD5

0b52206c24a1e7e5be17e08a76d972f6
SHA1

20e458e4bfb3f923f8257a02360436b95c3cc441
SHA256

25d53868572565bec408d7699dd26fb04e2cc2e5fb4f8161674bfef12ea33e85
SHA512

46b2141863828963baddedaef7fe82ba2a71f5a89704038f63cf448d47a7388e5a37906eeaad2733ff7a7c063d964e6d1b99bb5a4573cb09b967cf02d9a210d8
SSDEEP

49152:7JfFlXuknm+cFTr1IvatpBckbgiM+JCG:XlXukXcV1gatpBvnJD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b52206c24a1e7e5be17e08a76d972f6_JaffaCakes118

Files

0b52206c24a1e7e5be17e08a76d972f6_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 904KB - Virtual size: 904KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE