0cb4c0dd18ce7bcb4def0311c1a8965f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cb4c0dd18ce7bcb4def0311c1a8965f_JaffaCakes118
Size

106KB
MD5

0cb4c0dd18ce7bcb4def0311c1a8965f
SHA1

ff0c55d08644b2859360d7e1c4e5b64a179af0cd
SHA256

e94a1bfafb9e8aa1bd8d62746f2cc83e899506f2a26547431a0f6efb3bbd5583
SHA512

9e9776400a37439b5cfcdf7a634fd5698dfc8928834d5023412c0503df8bedd8186fd256b1168940bb1ff08140e32e09da8059408dbdb1be4eeea93fc8ba7ab6
SSDEEP

3072:o45Kwg8QbGTh+A73LAT9LboTtkHLf88H6qjkJHAjm8uOTtH:o472STz770lbotqoJxyTtH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cb4c0dd18ce7bcb4def0311c1a8965f_JaffaCakes118

Files

0cb4c0dd18ce7bcb4def0311c1a8965f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.bss
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE