0b831df614668d6dbe6891c3593fe64b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b831df614668d6dbe6891c3593fe64b_JaffaCakes118
Size

86KB
MD5

0b831df614668d6dbe6891c3593fe64b
SHA1

22700e250b08820108694bdf28959c490e193aa9
SHA256

db722e4b3eab3099ab6c1d351905ee9660d76c89ca621155446249859b06dda4
SHA512

90628eec820af94672be17bd1f926f3e935f1dccf2ec6430b85fbb4cfe39bd53b71aca2766eeb01bc3e82695891356698c404b897160bae421ca4460896b9708
SSDEEP

1536:01Rjr6PKT/wJNr0aCraUFMM40dE6N9gE1QetDwOpF0eR:01RjuW/sCWUF+0/9TQcDwO3VR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b831df614668d6dbe6891c3593fe64b_JaffaCakes118

Files

0b831df614668d6dbe6891c3593fe64b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ