0b8a2a2d0829aac505c7c769f5b9d7a4_JaffaCakes118 | Triage

Sharing

General

Target

0b8a2a2d0829aac505c7c769f5b9d7a4_JaffaCakes118
Size

112KB
MD5

0b8a2a2d0829aac505c7c769f5b9d7a4
SHA1

2142cabfab819c166bb81b24a85d007698faa43e
SHA256

9e53375c6894b4e6d2c66131a291b176801cbd008c4b12ea172c164f4b9cf009
SHA512

a49c746f13f1607818c7f6b610cb7b5e495cf2c27633710b0855fc0d25b2412ccf2ebb126c363442b82d73a2cce5bbe4999cf1b35e1f61e4bd2c2a8d1c23e8cd
SSDEEP

3072:DHMgjqRFiJUMWGNTEzVIlT0Jr0fXzthxmi30AFIb:x3yVIB0JrsthcT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b8a2a2d0829aac505c7c769f5b9d7a4_JaffaCakes118

Files

0b8a2a2d0829aac505c7c769f5b9d7a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.re3oc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ