0c116b5161b578fc8d83c35e6f11886b_JaffaCakes118 | Triage

Sharing

General

Target

0c116b5161b578fc8d83c35e6f11886b_JaffaCakes118
Size

5KB
MD5

0c116b5161b578fc8d83c35e6f11886b
SHA1

b5c998f70205c7cb2f1848b99e3141790407b490
SHA256

bb06b8ab2f2b8d1be9c23eeea61aada44c1b3a9db0de4e6ff47f2626bc4760c7
SHA512

88bfe3cafca6e77dd4af8747fc7eadc5b7cd0f8ecca2c2c81eaacec30b26345ae6d8230637ac4bc06cc0a19c67eba4c4a1daab4590ccfdd0a4bfe8abde506433
SSDEEP

96:R3L/Jp0/J4RlhLXV7DMyuIkfrcNRi64zwKvdqtwdYKpJ7DEJkpddsHMCz:1JIJaxdw9uRi5kmdYiBDqRbz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c116b5161b578fc8d83c35e6f11886b_JaffaCakes118

Files

0c116b5161b578fc8d83c35e6f11886b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

code
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vtext
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yvs
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE