0bc9ea50913ab09ad716f7cf8bbad0fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bc9ea50913ab09ad716f7cf8bbad0fc_JaffaCakes118
Size

609KB
MD5

0bc9ea50913ab09ad716f7cf8bbad0fc
SHA1

e5422b4f4aa2161dcedc3992d194a09a6ec24f3e
SHA256

850cd9a49b1ee46dce453ef9f11adadf583c1a4833197e05918a31dbe703ce7b
SHA512

d571babcc83985880f6f1d26b9a881e90215802a565e0177b869a95d732270a98c320706a388c8c5cbf67dd668b24e83142b2f41ca9766cc798caf8342141579
SSDEEP

12288:jqOnHS7T+CMPW5Av3X4tbAYj1YJAeZ1suO9KkAt8wkpB5NPnvvvzHdzF5t:jxHa+C8W5AvHYZ1YhijKkAt8wavnbd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bc9ea50913ab09ad716f7cf8bbad0fc_JaffaCakes118

Files

0bc9ea50913ab09ad716f7cf8bbad0fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

NET4
Size: 555KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

NET4
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NET4
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NET4
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NET4
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NET4
Size: 19B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

NET4
Size: 19KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ