0bad02922c6ea1592677911b17c8da29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bad02922c6ea1592677911b17c8da29_JaffaCakes118
Size

525KB
MD5

0bad02922c6ea1592677911b17c8da29
SHA1

2f8bfc75ba91ede6b6a092a970421f8987745f80
SHA256

9bc78638a79b13cb18051cc1a5ed4f09080542d87048ff09fee8c67b5887c49c
SHA512

ee41d0d8ed39a352b5857e84085163f589b254517ba0283cb87fdae2c121fd05c95968b06030fe44818af0e53f368dcbcec07044975e0c15a4b0d1d22508ea81
SSDEEP

12288:Kxly3GD4mus1+hScB9KUYr2OD4U1ayoNmav/HpKy:KHlLuXtYUo2ODX1a68x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bad02922c6ea1592677911b17c8da29_JaffaCakes118

Files

0bad02922c6ea1592677911b17c8da29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 480KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ