0b136ebb6783b2f630c7477f9982769e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b136ebb6783b2f630c7477f9982769e_JaffaCakes118
Size

21KB
MD5

0b136ebb6783b2f630c7477f9982769e
SHA1

c6b744556e392d6381e5924fc6a1a47333b68e40
SHA256

6598a554ae4a6317f4ddc98c8b1008f3a3a2b2fe0c3e23f5f20acb11bce916a6
SHA512

6b07d02219000ac641239fdc286fda73a98673c414ac45b10b887da3740297d521ea5ff8e7405bd0cb1a434abd0f40aa8d589330b098dba0ad2e0384bff76fdc
SSDEEP

384:v/xFGBOpBD93znEra8Y8gWYC8fIC0koQjCQxHZ8cSIuK:v993zEu8ClVQC0kn3Hm3K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b136ebb6783b2f630c7477f9982769e_JaffaCakes118

Files

0b136ebb6783b2f630c7477f9982769e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 337B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ