0b84797b0e4c9844fa0859e0c6705365_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b84797b0e4c9844fa0859e0c6705365_JaffaCakes118
Size

294KB
MD5

0b84797b0e4c9844fa0859e0c6705365
SHA1

992ff94d5729e312557c55fde016fa863f305012
SHA256

980d6a6e2a730a725ea105c26c12639e4cc00e886b631981d45d0819c4c330eb
SHA512

3c8fba87f7e68c63a26d706ade6c11d414a2f35313abb2bb9d3b93d3cdc8b6010137b4b596c50e7a416efb127b21ef67164899f239fd3111bcc2383dc14b9d0a
SSDEEP

6144:e4nDWgRAkPIgFDwHCEYPssg7MlpH7kZUFeawIp/DsgNKA7zjkSk:zR3PI605YPsspF7kC8sDvKkzjTk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b84797b0e4c9844fa0859e0c6705365_JaffaCakes118

Files

0b84797b0e4c9844fa0859e0c6705365_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 290KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 143B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ