0b9e61fcd832b57660ffe734c00a9fda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b9e61fcd832b57660ffe734c00a9fda_JaffaCakes118
Size

152KB
MD5

0b9e61fcd832b57660ffe734c00a9fda
SHA1

1173c79cb2420ddf2c695baa1c8264ebbeb572ed
SHA256

416385bab643d39562493c8c440106e318aedaa022f76f076d0e7cdc8eac06a5
SHA512

d6a62a360a17a6aa34373faa04e6576f267fb7cc613003d44e3668317b38b8cc48ed7376b01c882119e21f2efea687b50d40ce674e92693e9bc7ef1f47d91434
SSDEEP

3072:U/OZU+ihDZGJVOSnfNHzHLz+UJLLIXXsUJLLIXXwOyt5N:UmdzZfNTH/VJiXJigBtP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b9e61fcd832b57660ffe734c00a9fda_JaffaCakes118

Files

0b9e61fcd832b57660ffe734c00a9fda_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 503B - Virtual size: 503B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE