0ceb54256f0c265bd489f582221ed9d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ceb54256f0c265bd489f582221ed9d8_JaffaCakes118
Size

786KB
MD5

0ceb54256f0c265bd489f582221ed9d8
SHA1

225670e70f22c9f3e97eb47fc262fafb53e74173
SHA256

157958e2cddedfdbf39a15b2ba2a0b500d64bdcbd7efc4e8fa24060016072fd1
SHA512

170b38b34689cb3f106ac2552cde58d649f5e565bab11313b428083d3fbad65cdf8c157b3a76eec9508aa13c53e8478db1b831bce91d89fc2533472a8a401a5d
SSDEEP

24576:7IU9ALduzsBMiuWb876J+E1OamWl0QdcS:7VAUzsBmWb8GJ3/mWlRdcS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ceb54256f0c265bd489f582221ed9d8_JaffaCakes118

Files

0ceb54256f0c265bd489f582221ed9d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

mstordb.pdb

Exports

Exports

_resetstkoflw

Sections

.text
Size: 575KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gda
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE