0bdec3bdf82f407802b1415b2871375a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bdec3bdf82f407802b1415b2871375a_JaffaCakes118
Size

694KB
MD5

0bdec3bdf82f407802b1415b2871375a
SHA1

ea3b3adf483a9fad635baed1d841aaf72e5796f1
SHA256

8646690fc78c72052862fca31047c4a328c48e227a77dc312500541a9c15c5a1
SHA512

f62cb208d65114ae120b2f697eceae3189b23ef7b128fe149a2425bbe26196a104bd26f9b2a619c28ab62d3b9d9220257738f18bfa1f6e5d580549150a55ea9c
SSDEEP

12288:lFXz9IPT10IXfPM5dZcAygN4ILk9bmRhnLuqu/lOhX6tI4wVNDFe8HS:lF9IxtPPM5dRT6AhhYIhVNNy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bdec3bdf82f407802b1415b2871375a_JaffaCakes118

Files

0bdec3bdf82f407802b1415b2871375a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 567KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ