0b2a6ef9a36db25f53dea3b01fb0d581_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b2a6ef9a36db25f53dea3b01fb0d581_JaffaCakes118
Size

81KB
MD5

0b2a6ef9a36db25f53dea3b01fb0d581
SHA1

098fde26df58e2a9324f11fd7fdfe8890fdd6ee8
SHA256

be21a077608496dbeb3916ba41b625eecbc197ac1deb129e72e71a51cf9a4e5b
SHA512

d3a1434baccdd103c5f1afb49d22a2ce3f7dea546e761624493fa58b538cbc43621245c46928cbb75bef8b390ad9d006882f64703da26db3d803b133dddeee00
SSDEEP

1536:yN6x7OrO8+ADmSAYEItSgV7KlGOv0/siF4duXU9+Rdokv05+lC:S66rO85dJEUSQOljvWFcuXUOc5E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b2a6ef9a36db25f53dea3b01fb0d581_JaffaCakes118

Files

0b2a6ef9a36db25f53dea3b01fb0d581_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\depot\enforcit_maint2\test\testprograms\windows\RandomizationTest\Release2008\RandomizationTest.pdb

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ