c0b78e36538039db4ca0be2277b6d791_JaffaCakes118 | Triage

Sharing

General

Target

c0b78e36538039db4ca0be2277b6d791_JaffaCakes118
Size

3.7MB
MD5

c0b78e36538039db4ca0be2277b6d791
SHA1

be663cce605c2c47f47b689c5e88dd426c8d9005
SHA256

781b6b98e68ca9e87d9f95664f54e49d71ff9e63ae9a9bf53a7dc3dbe4b5329f
SHA512

007b8690b4e81564c4ec4f634cbd9698d19d7061a03dea943132f0e84824d1cd35d4bc2c386e987d8d75c239e5ab484327b6ca6bc24560cbe29c0baca8bc857e
SSDEEP

98304:KAGXN1/BoN86sX3FlSdJg11WN2oHSRErmNc:K1/BCsX/QAoHaErmNc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0b78e36538039db4ca0be2277b6d791_JaffaCakes118

Files

c0b78e36538039db4ca0be2277b6d791_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 863KB - Virtual size: 862KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 59KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 240B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ