08f6b5159bbf578698916691cd1e5061_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08f6b5159bbf578698916691cd1e5061_JaffaCakes118
Size

65KB
MD5

08f6b5159bbf578698916691cd1e5061
SHA1

fa55b9a88f4d62505950708c22a6b1458c0341b9
SHA256

b1642ea2e132b41e57108e92e89607b1d6986a9a781718d43032fa9316a60d5e
SHA512

828014b711e2284831db8bc361e35a15e2c68608a3eba0ad43a4ca6ad88e3bbde80e8678a7871f02adbe8e90abbaa0fd6f4f77a315ac4595a14deeaceed4a4ac
SSDEEP

1536:7eD3l59rW2A5jUup30da9tut7MxXXP/R9zZoB6lgesr:SNrW2sAup/9G8/Zogo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08f6b5159bbf578698916691cd1e5061_JaffaCakes118

Files

08f6b5159bbf578698916691cd1e5061_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.init
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ