0d8bdd12dde8b0bd06462a6c4f6a7617_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d8bdd12dde8b0bd06462a6c4f6a7617_JaffaCakes118
Size

94KB
MD5

0d8bdd12dde8b0bd06462a6c4f6a7617
SHA1

2bd8a967b6778d4f7dcf42fd1bba964deafedb06
SHA256

96b14064dfc613d28affc4e69a71e933f1de4f1ab846ba80c30dce378ab58416
SHA512

83398d21142c556fe5d9c8d49c251becfe09f0d6cf67a0ba69f41440379d44ee39aebce6335d703d29e7ae818e6cdee148ea44cc314726aa794252c02be45751
SSDEEP

1536:wbO889LGH7zi16xGTtnY1iHxwdyPGLOlGSOB73Uq7PcQPKrPq+XhL:wa88dGHyYDUGrSm7H71PKzV9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d8bdd12dde8b0bd06462a6c4f6a7617_JaffaCakes118

Files

0d8bdd12dde8b0bd06462a6c4f6a7617_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

ojec=segments1

Sections

CODE
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ