0c0ae1870bc8cebbe3cbc9396917d023_JaffaCakes118 | Triage

Sharing

General

Target

0c0ae1870bc8cebbe3cbc9396917d023_JaffaCakes118
Size

905KB
MD5

0c0ae1870bc8cebbe3cbc9396917d023
SHA1

b792676ef6221d54c3cdf7512b0a42092f33b1c8
SHA256

c2bd2e74fcdb69a36fa879eae05a8d7f8c620c9ffd5f353d5b8c8b600702b4cb
SHA512

c03263c7b4e11543011a1c06741f6c3ba3c036cd9efa807a0e0a57ab9f0b3857653c39254859b734a3528dc810b581497f7d8dbd088ae39d401238691df424c6
SSDEEP

384:hcu3frpOraJTqnpdQtHRjd3TwU/GhLVUxI:hp3zxJTqpdet5TwU/cLVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c0ae1870bc8cebbe3cbc9396917d023_JaffaCakes118

Files

0c0ae1870bc8cebbe3cbc9396917d023_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 864KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ