0b5d39ccf60cb6d1529498593cc21636_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b5d39ccf60cb6d1529498593cc21636_JaffaCakes118
Size

15KB
MD5

0b5d39ccf60cb6d1529498593cc21636
SHA1

eaf39ac6e6eb4c54b0095c9365e0101af1eff5f5
SHA256

ba8a82adcac0b1b6b205562872075d07d0cf7a6436160bdaf5722c3f885d66b8
SHA512

3ac9e93ea481ff6f70c769ab226b819b735e2652507c6e783518a1a3dee244db965d20a0b221f59f7793a3d6034f131ec56cdb56822efbab1c56091d3fbc6ae8
SSDEEP

192:lZ5DFpOiHn1jwtAKopj3QvsaQCQP4sxe6bACFSvxROpsNpptU8MTFw:jHpOwnFwkjH4sxedvCFw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b5d39ccf60cb6d1529498593cc21636_JaffaCakes118

Files

0b5d39ccf60cb6d1529498593cc21636_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ