0c0ee3963f3b6f316dc0bb3dedbee317_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c0ee3963f3b6f316dc0bb3dedbee317_JaffaCakes118
Size

60KB
MD5

0c0ee3963f3b6f316dc0bb3dedbee317
SHA1

9b7d6c703d79af1b74884191724d9eddc1d3247d
SHA256

fe03c47a0880c17aec389b7cad04beec0efdf1fc9f2e5d0d1d9143ed471a4f32
SHA512

179f567c5c7bdbcc6b0af6cb4422fb08e9ea8d117c394a5ca5c5d28a039fc5264674b5a3b78efaf112b2116a78e30df401eab41af783d7ad8f43dcf38435b097
SSDEEP

768:/bqOWWKX0Od2iSEfQ3+Y3ovNdbksYz3GA5abQlRd9pWpKa2tkV6/v4OEysKkj+8T:GOzKz2iSL4/SKSzGKtpnGH942eiJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c0ee3963f3b6f316dc0bb3dedbee317_JaffaCakes118

Files

0c0ee3963f3b6f316dc0bb3dedbee317_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.DDATA
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 12KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ