0b9eb4fe1226045c25c6767a8fd93153_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b9eb4fe1226045c25c6767a8fd93153_JaffaCakes118
Size

544KB
MD5

0b9eb4fe1226045c25c6767a8fd93153
SHA1

1d5490dc29ac9b18618f2f8f613f4b43f8ca3050
SHA256

1f79109eaa2f3f4900d979313bcbfd11cb9a9aea8a7f9ffbaa29ad3542da039d
SHA512

c76e675c4196584bb91cd862267b485cfbea9201a8e46d7f72f4408be7ad9da49358ad61ed800f9abf4ab14955fc1ef1389e87d33518e5fad157b7980fbb7144
SSDEEP

12288:gyis4PjzkqBvLpEOpBtd0u0w7SBgh28bI9qBjtLQ:gwujgGvLpEODwu0w2gh28bI9qBjts

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b9eb4fe1226045c25c6767a8fd93153_JaffaCakes118

Files

0b9eb4fe1226045c25c6767a8fd93153_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 933B - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 3.0MB

.engine
Size: - Virtual size: 408KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 405KB - Virtual size: 408KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE