0b99352e9c08cf4616d2d40429a2bfb7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b99352e9c08cf4616d2d40429a2bfb7_JaffaCakes118
Size

844KB
MD5

0b99352e9c08cf4616d2d40429a2bfb7
SHA1

cc89b2f5d34102422b6bd1252a3c054da5798a63
SHA256

f5191c6a5a157968be924dbe2714b0e82011b1844254ea9d1c1464543ce7b0a6
SHA512

fec29d70f9c7e8ae25b07b38eceaa89790591e7c2d5fcb3a2856bb264734b8710dd000dbc6f901daaa0304939a323eccc52c25f3a0dc70b8339090e221ab05c2
SSDEEP

12288:V59SXqc1FJkiV2CGtf13awRAPfG0WBu97aJURi2OheUi+c5xzYFD67b/O6twGjPd:V50j/VgTjmxxVDR65O8lDaN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b99352e9c08cf4616d2d40429a2bfb7_JaffaCakes118

Files

0b99352e9c08cf4616d2d40429a2bfb7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.CODE
Size: 5KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA
Size: 793KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ