0bd60ef4d7305ccfdf5d71facbfc64bc_JaffaCakes118 | Triage

Sharing

General

Target

0bd60ef4d7305ccfdf5d71facbfc64bc_JaffaCakes118
Size

357KB
MD5

0bd60ef4d7305ccfdf5d71facbfc64bc
SHA1

25a8882b4d01cbb338f4a8b7e0a553b650531fca
SHA256

ac1355c1725e1295fd962485a36018098b725f5978c48c3a1994b67467d95c61
SHA512

d1edd5a8e1f1eab6504ac85825c8d96c3e1ebdd352ed3f028597b562356b9fb6ba850dfa4f1393a62db446c547ffa97769a9ca403d23f5836c043ed20b9d0c91
SSDEEP

6144:wiOSS7j5ICqknRbFPLN+CCzX5G5wH3tMcZZLjfnH7yymovHfH:wiOSS7jFnNOCQXdjnfHmyVf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bd60ef4d7305ccfdf5d71facbfc64bc_JaffaCakes118

Files

0bd60ef4d7305ccfdf5d71facbfc64bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 357KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 56B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pe2
Size: 54B - Virtual size: 54B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ