0b56d3ca5b15ef34469103fd8d489a5e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b56d3ca5b15ef34469103fd8d489a5e_JaffaCakes118
Size

2.4MB
MD5

0b56d3ca5b15ef34469103fd8d489a5e
SHA1

5fa15501fa443945eaf5e42841497275b81d5687
SHA256

36831d207e1a605d1822bb3f0ca2098e3fb34541939eb69a011a5347ebcafa93
SHA512

2cc0b77fd08545603fea2bf57909b0cf262fec722d83152267c19b6caf5082991d7aa06d68c9f65a85a287e1a9d601acce29f45e8873026b9f9f75c0c3ef485c
SSDEEP

49152:rhbQr/S70g5IbGabYYsIXUswtCPmuDCOHbaZ2AID8:rhbQ7S70gLabLeOPmpamZRID8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b56d3ca5b15ef34469103fd8d489a5e_JaffaCakes118

Files

0b56d3ca5b15ef34469103fd8d489a5e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 2.3MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ