0b6e30ec98638666c4bb41840ea20779_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b6e30ec98638666c4bb41840ea20779_JaffaCakes118
Size

791KB
MD5

0b6e30ec98638666c4bb41840ea20779
SHA1

8828f28506f4d02178b3226a231e03fae9b571ce
SHA256

a32e9f5b374066a94357058c8688915e66aeb2dcfcdf6359204481ccef155ede
SHA512

4ba01e9268c6c10a483909d8880e53cbc20226bb3aeb678b02826ae7b641b3a4260a7ff81fb6e6de8cf5370fa36650329bf09184e4363550b422a3529720d6d0
SSDEEP

24576:wBpBxjuPSTSeRiDD7+tl4ISbKbG9YKreJ:wb/KPSOoi37NvqMneJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b6e30ec98638666c4bb41840ea20779_JaffaCakes118

Files

0b6e30ec98638666c4bb41840ea20779_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 4KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 755.0MB

.xnkllt
Size: 774KB - Virtual size: 776KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ