0c193beeb42162433c8c426492e76230_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c193beeb42162433c8c426492e76230_JaffaCakes118
Size

5KB
MD5

0c193beeb42162433c8c426492e76230
SHA1

b207b17fc6c787fbb1f3aaa6b42135c5a4b0dbd1
SHA256

7394e7fb476ed9d2c805553b7bf64c8810476ea839d7d535ad05e9acad57be0c
SHA512

a918090e66f91de97c5ebcc020bb847373f79bb05a422b8e3984f7b9eb8c86e76c9a6b49aeb79a43e377399c72a0152aa6a7fe6c2cb1161ec0aceeb7ecb47fbf
SSDEEP

96:RDL/Jp0/J4RlhLXV7DMyuIkfrcNRi64zwKvdqtwdYKpJ7DEJkpVs:BJIJaxdw9uRi5kmdYiBDqMs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c193beeb42162433c8c426492e76230_JaffaCakes118

Files

0c193beeb42162433c8c426492e76230_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

code
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vtext
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uro
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE