0b57a8d03db8fe21ee2b0ec74743d18e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b57a8d03db8fe21ee2b0ec74743d18e_JaffaCakes118
Size

594KB
MD5

0b57a8d03db8fe21ee2b0ec74743d18e
SHA1

d0f6ac5c3b2ec07a709275bc8e3ce9f87d751f62
SHA256

a3caef9897beafb1b71db0515510db2b7f94d21fe5b421aafe98f1dfc6089500
SHA512

b54ec229377d28bb70cb783369cb72ad032ccea3e9b7dc21423cb1d8ce0b530bfabf3f4a3fb49cb28edb925f091b83a39d4475125a2570e470fd83da2890145c
SSDEEP

12288:HhIjmL9twZ2gmQmfOv9Po2MA0dQZqxyLWeyGBvfmw87f5:Hh+6pgmQmYSrz4WveyGBvfmwm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b57a8d03db8fe21ee2b0ec74743d18e_JaffaCakes118

Files

0b57a8d03db8fe21ee2b0ec74743d18e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 508KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ