0b96c0e575253ca672bb53be271b6090_JaffaCakes118 | Triage

Sharing

General

Target

0b96c0e575253ca672bb53be271b6090_JaffaCakes118
Size

85KB
MD5

0b96c0e575253ca672bb53be271b6090
SHA1

b2f94ee7aaa3cb950e5323a7d34232aa069f933d
SHA256

5ee2bc127031402c6cd4cfd3842d5dce2c4f019a6b18a2f1a572fefa73f9af00
SHA512

b8c6487ec2935a74a50e46bc864edf8940a3a3b3a9ff460960866262de2478fe4671f61cc31b7c91ef87cf0be84bfd4f1d6b1ac7f1ffb0013d6671661c330058
SSDEEP

1536:3hEwqXPZGyAqyofRVlRY/ejQZ3YrB9dfjA+8:REwkPAyVymrjW3Ufjx8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b96c0e575253ca672bb53be271b6090_JaffaCakes118

Files

0b96c0e575253ca672bb53be271b6090_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ