0c1e4f51eb6f5e10e96ea588e28c9be1_JaffaCakes118 | Triage

Sharing

General

Target

0c1e4f51eb6f5e10e96ea588e28c9be1_JaffaCakes118
Size

363KB
MD5

0c1e4f51eb6f5e10e96ea588e28c9be1
SHA1

c06d5fb734d34947c530ca25d6caf7e7ff061cf0
SHA256

44fb9d698cfbd8f791352f4f56046d8c8fc73735cb8d2f340e06b138e37f8ae9
SHA512

f97a3c889af30c4d906858b0e00272be54a46ceb96ffe3c3baa50babfa499446d71ef9f264c2d643afe1930b8fe4b3e4b501a3437b0ab1bed881fb358a5a54f8
SSDEEP

6144:gFCXp8Uqyn/03Wa8jHjmWjcm/xkbDYQ0OHugRxz7I0yLq+inkl:mCp6yns3Wa8Wmc0eXYQ0E80WqO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c1e4f51eb6f5e10e96ea588e28c9be1_JaffaCakes118

Files

0c1e4f51eb6f5e10e96ea588e28c9be1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 306KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ