0b84d340265fbe4bd4553217a9ffae8d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b84d340265fbe4bd4553217a9ffae8d_JaffaCakes118
Size

45KB
MD5

0b84d340265fbe4bd4553217a9ffae8d
SHA1

2241453baba81e4e1a71ebefd28dede9ca5b044c
SHA256

c1544d04efc97f7fae73e93572862776e05f6d7b4ca9be34681e69eb5db20ff2
SHA512

3007b217d5239cee8601f9c8901cb41acffb2f3aeb3981a3e2f5e9875b1ea8afcf4c2ef0fc5be4a5d670fa95f4b2aa6e7f8a94e8ef99bcc508eb571442327521
SSDEEP

768:HXalbSjsWuXOwmgUEPu1QihqY2TSYjoypG9C0tkhzwDRjVk0PSfDw:HXaVWC1SE11ypZm4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b84d340265fbe4bd4553217a9ffae8d_JaffaCakes118

Files

0b84d340265fbe4bd4553217a9ffae8d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:

Imports

mscoree

_CorExeMain

Sections

.bing
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sbing
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bing
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bingo
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ