0bc8f1ff53822688d137ee644010caea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bc8f1ff53822688d137ee644010caea_JaffaCakes118
Size

97KB
MD5

0bc8f1ff53822688d137ee644010caea
SHA1

cfa28c81417fc6f036a1a04c1991573d7c9d651c
SHA256

54e95ac9d4b9f6408a32e58e7e6511e811c7eebebd873b6aca393793c5199e84
SHA512

e4eca74f6f4c796106f7cecc1b9a5672eaa437bb316fe8832a49c809327c21b95a37e38c9c04c9b27506bbd9a8844472256b9b98b8a01ffef44b7369742a367c
SSDEEP

3072:EDCG6Dm0vGVkqqhzQsMgeCXzn3HtLJ5qc:EuG6DFvGVWkTiDdLmc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bc8f1ff53822688d137ee644010caea_JaffaCakes118

Files

0bc8f1ff53822688d137ee644010caea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC5
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC1
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC7
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RSRC3
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ