0c23f09995bd8d015280bfbb553ee01a_JaffaCakes118 | Triage

Sharing

General

Target

0c23f09995bd8d015280bfbb553ee01a_JaffaCakes118
Size

202KB
MD5

0c23f09995bd8d015280bfbb553ee01a
SHA1

92970a62af0ae5f9cb034ad2a13cdd1ebf6144e7
SHA256

145df0b5701409171e0c1e13fce5f69e4d682ced38ae0fc1003d0a94304e433f
SHA512

67f30b0fc1968d1f0c3d7c905b396d25e2a1adbaacc7f1750502a91b7fc7c0eade75d06e01d305761b0ce7abde958d39c4c9ab358378f5a11ccc2a56a57ee6ac
SSDEEP

3072:LztJ958dZuQJj3/hhCTGAcsXjWZ36ZgEkTMNUG8utxhN51aUXQAMbkByx7+SsK:X9yDjPDCTzlaJ9TqzDn5XgYMiSsK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c23f09995bd8d015280bfbb553ee01a_JaffaCakes118

Files

0c23f09995bd8d015280bfbb553ee01a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

aspnet_regiis.pdb

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE