0b1e493ff745e7e294f982cdeb6dba44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b1e493ff745e7e294f982cdeb6dba44_JaffaCakes118
Size

60KB
MD5

0b1e493ff745e7e294f982cdeb6dba44
SHA1

9697b1617aa17a2e153b60e33a61e2e0e11cc087
SHA256

699fff088ad71d35c5bb8a65ca54af3136d19dea54e5d5df362fe2c6a4c4e0b3
SHA512

ff2e4c1f8e409a1123fc1647543b11383a04a3a78e81953af6e16ca01720cbf2e87e1bf2e77e15d51a821b49dd16416bc216e9a19d144608ccbf56b92a6d0191
SSDEEP

768:BU8897xuNZeh/u1/KmWxN8x00tgnvqP52DXdMSTwDGodeA8TKAAa:BUr7KUMMx0NwD0DGo5udj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b1e493ff745e7e294f982cdeb6dba44_JaffaCakes118

Files

0b1e493ff745e7e294f982cdeb6dba44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ