0dceec9a6b080d4bd9d14696259386c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dceec9a6b080d4bd9d14696259386c9_JaffaCakes118
Size

667KB
MD5

0dceec9a6b080d4bd9d14696259386c9
SHA1

fe6672e154b70441b6d144ede426012cffec2e02
SHA256

444147472ba54f1f58776a84e98152ae28dfbca23602cb440a830fddd4a283cf
SHA512

ac7898c688f1e07ade53b1fe6be8c547a40c52939df9cf4a215649717173832e96bc382ff53a78b5f666accd88712769d5a19700256dfdd51b0d7063e6925815
SSDEEP

12288:SeQHUbN6jurJ09xKasQg24PACOUllkJ8CYMgbxIW2U2a5ekA5zp/vVDE:40bJrJ09xKaVg2dCTlLMKInU2L5llDE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dceec9a6b080d4bd9d14696259386c9_JaffaCakes118

Files

0dceec9a6b080d4bd9d14696259386c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 453KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ