0fc6d2c047cf34fa8dbccca8ba2d7c3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fc6d2c047cf34fa8dbccca8ba2d7c3b_JaffaCakes118
Size

438KB
MD5

0fc6d2c047cf34fa8dbccca8ba2d7c3b
SHA1

78ec93d21a7b57bb0b4487a6b5317011aa460602
SHA256

e5ba5859a5b3a5eca349ab874fa16f809ce8aee4b4b9e035c9ce45812dc449b1
SHA512

2588c88b2bc6b1d5ae0bd5f9ea535e5c41ac2d1acfa626dd82d338add8330df9e68d58368b15c929e9f01a997232bc645e7ac92bb000cf45d18bbf0048b90360
SSDEEP

12288:5A3SyzNCaRyd7rG2iJ0cCmWRa4Beq5gLYMBuIw:5HPG2MM5vgL/BuIw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fc6d2c047cf34fa8dbccca8ba2d7c3b_JaffaCakes118

Files

0fc6d2c047cf34fa8dbccca8ba2d7c3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.db94wq
Size: 1KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.f7l01e
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: - Virtual size: 3.0MB

.loader
Size: - Virtual size: 448KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: 431KB - Virtual size: 432KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE