0ebd28d4898515e3cd0f1589a1cd942b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ebd28d4898515e3cd0f1589a1cd942b_JaffaCakes118
Size

78KB
MD5

0ebd28d4898515e3cd0f1589a1cd942b
SHA1

2e7a91b4fd732a7d0aa76b133f77c1fe418b6011
SHA256

759cee607ca737cd51b6807219e64f333854b7b4be2b802558ff480852618f81
SHA512

a991b535fab8bda69460d8530f5c76f7b63214032cd61046538add5640d2bc6346643074550d22723261a4336f1493d4068b86d5f57d2cdfdb7f1b3d3b58e768
SSDEEP

1536:QhA8u9yFzgbg9Jbuij36g5meh3/zcF8M4ICTPRvYw3sEjX/:GA8wozgkubaf3rVl+EjX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ebd28d4898515e3cd0f1589a1cd942b_JaffaCakes118

Files

0ebd28d4898515e3cd0f1589a1cd942b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 293B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ