0c68aaf33156d145ff200928c90e2483_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c68aaf33156d145ff200928c90e2483_JaffaCakes118
Size

555KB
MD5

0c68aaf33156d145ff200928c90e2483
SHA1

66c8da9252e9a615832e8b1e49aeef6dcb2d8a33
SHA256

20f044f498c768eb794bc1967db3df94772d7d798003df4873da5d1d61252066
SHA512

b7439156952b30d05e5cb45e6a86ff698a0e8b334201164f4b91abd3bc9442ae146e137ed6e489ee805f91784a1a4bee913129dee860ebffadf1962b41125f0f
SSDEEP

12288:mobHejh2Fev2iHJfzKrqxRllGleSs3IiTZhdhrc/EsDtNc:zaF2Fev2iHREqxRTaeSJiT7wnc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c68aaf33156d145ff200928c90e2483_JaffaCakes118

Files

0c68aaf33156d145ff200928c90e2483_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

setlang.pdb

Exports

Exports

_ctime64
_gmtime64
_localtime64
_mktime64
_resetstkoflw
_scprintf
_scwprintf
_time64
_vscprintf
_vscwprintf

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 108KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lif
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE