0cd03b8daaa006dcdd27ec47259877b4_JaffaCakes118 | Triage

Sharing

General

Target

0cd03b8daaa006dcdd27ec47259877b4_JaffaCakes118
Size

713KB
MD5

0cd03b8daaa006dcdd27ec47259877b4
SHA1

85f9eedce702bf16f0dbc2937068e872b0e676c0
SHA256

edae0949105b36e1b7c76eb2e2b38b9096ceaa81fba2459bf74fb03820304dcb
SHA512

405502be40a7ba91238db6ba4fdb276576770e11cae876455efcb595c6495e2a475389fd238bf724596b84ec463fe97a1bc533a956757fdd60b13f958b75181e
SSDEEP

12288:gJvS+q4FmBxkQSsoYYgTj3cveEBRXjIjzYmhRQmA83:gJD8wQSsoYY0sNRfmhym53

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cd03b8daaa006dcdd27ec47259877b4_JaffaCakes118

Files

0cd03b8daaa006dcdd27ec47259877b4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ