b0b6d8bc3a00ff2d42cf9d990d93c86c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0b6d8bc3a00ff2d42cf9d990d93c86c_JaffaCakes118
Size

531KB
MD5

b0b6d8bc3a00ff2d42cf9d990d93c86c
SHA1

8a0e24486e883044dc70db716dc5ca75e47df0e5
SHA256

a91e8a0ff4ab30d354e2869cc6a4f2616ee1c901455afb2599bd1eef9774d97d
SHA512

ef15cb9c8d5d7459896322fc0b2ac736e8e3e1f1b1ca219bcb25c6e144ded8bcec1c42188f205114ab0600b972aee78ce298ec976f82c571bdfa923d76cd13ef
SSDEEP

12288:H3sS8+30EtzT7zyh/R6tIccjXk9H5UAut1IMJQnJnJU:cS8+vn7zyFR6tggZUHJqn1S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0b6d8bc3a00ff2d42cf9d990d93c86c_JaffaCakes118

Files

b0b6d8bc3a00ff2d42cf9d990d93c86c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 3KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: - Virtual size: 3.0MB

.idata
Size: - Virtual size: 416KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 516KB - Virtual size: 520KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE