0b4992bf3d7ad77a83bc3acf16d8e040_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b4992bf3d7ad77a83bc3acf16d8e040_JaffaCakes118
Size

182KB
MD5

0b4992bf3d7ad77a83bc3acf16d8e040
SHA1

de8a85908cf74a4c455389f06614c0d093852c6e
SHA256

45e9f130b17db1332d84633117d76f6c0cba72c8f2846bca57ade840d9c7ae29
SHA512

96075202734e31b88f43220c1c9ef18d0da41d1e08d362ba93ad9625675e09be53a10d31463987a41634152f495d2a4acfcf46c8b690947cf29ba9ec695f726c
SSDEEP

3072:JCHSPZtd33bWpqdpxAOffEg8SZc+cLeSxO+eoiG0ec6zgyxV/cl:jHSKfEg8s3cLetoi16z/xB6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b4992bf3d7ad77a83bc3acf16d8e040_JaffaCakes118

Files

0b4992bf3d7ad77a83bc3acf16d8e040_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.psikif
Size: 1024B - Virtual size: 835B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.attav
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yuk
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ