0bfea1f32becca0b5da3043524d3735e_JaffaCakes118 | Triage

Sharing

General

Target

0bfea1f32becca0b5da3043524d3735e_JaffaCakes118
Size

76KB
MD5

0bfea1f32becca0b5da3043524d3735e
SHA1

95ee485feb775fceca1554add2175aa7bd5524d1
SHA256

8814d6eccb1e9443985e67862e6a0819044ab8ec3462196a80933f63df3d9bc2
SHA512

1b109762a681e302b11c3ba35b67058bbe2eb5cc4b72d52ea2668c52495006c5c4406c80abc5d203e07eb62dd3f7bc68983c81a044b5ea5797c00d07bfd6ed4b
SSDEEP

1536:Zoy5AO2iiO7GWB8fZEDBB72NF1OcWP6ADSwEfqTIz+p3rRw7OATL:ZR4OBBWkj0FY/cqVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bfea1f32becca0b5da3043524d3735e_JaffaCakes118

Files

0bfea1f32becca0b5da3043524d3735e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.edata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE