b00f99e003d377f27e93fe84a008bcf0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b00f99e003d377f27e93fe84a008bcf0_JaffaCakes118
Size

78KB
MD5

b00f99e003d377f27e93fe84a008bcf0
SHA1

04c97ea2e7b7bd6729be0306971e7d1884c628b6
SHA256

ba90cb9fae37bf90f953f138c5993a5820496143b7b93c549716bac41b99f937
SHA512

a25b1a8339176e6885a99bb45c76cf941b864cf22af98adca20605a5e15019cf353a8454481b58250b1a114adca2b9aa1f04da0fc9423c7f781d343692dcf3d3
SSDEEP

1536:lHfLk31tLJLarjP5W+xRrQ/q/F3uASorxyQIuwcD:5fw3TLlK8+xR6qt3ub+LNwW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b00f99e003d377f27e93fe84a008bcf0_JaffaCakes118

Files

b00f99e003d377f27e93fe84a008bcf0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ