0cde96ed99c9b9b674051fa25e1c4841_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cde96ed99c9b9b674051fa25e1c4841_JaffaCakes118
Size

1.3MB
MD5

0cde96ed99c9b9b674051fa25e1c4841
SHA1

ae16cf0c6fc06fd6fea58f1d89000606bb52665a
SHA256

a695c9962761453fe2a70375a7a086972ddee223774f0f627b9a447ffb8a540d
SHA512

3a618d5859f039d27fbe845ce2beb41535c80981895ecf0df83b14031da1bb6af4cf2566ab63f8b808c4cc83dff03c36a2181d39bfcb0952e3fcf380bd8275e7
SSDEEP

24576:AlO9z5+sQpibAhu/FUqW8aq/fwPl4d9O/vZaN/9sHZSFwofr:As9TQY1RaW9O5K9v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cde96ed99c9b9b674051fa25e1c4841_JaffaCakes118

Files

0cde96ed99c9b9b674051fa25e1c4841_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 927KB - Virtual size: 927KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ