0c3592303d8af8eca2cf970a3278dcb1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c3592303d8af8eca2cf970a3278dcb1_JaffaCakes118
Size

214KB
MD5

0c3592303d8af8eca2cf970a3278dcb1
SHA1

83b88526fa733271ee156bc7ac73a01ca83d6a91
SHA256

04d2b047509cb3a0c927b47b90e09b73f7d9375da19102461c72390ecf6eb69d
SHA512

00dcaf832ff99d94ec28c44b3dc26dee116bbc69a78cbe080811a910e8f1632c0e103f1397d17e905701db3e7e4e1f3698417af9ea1d68a716b50fed50514115
SSDEEP

3072:tYMiOqYkH66666HH8AhT8UhE3DY5fslNzx7vzlHhFI:6MXhgUhETufalBFI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c3592303d8af8eca2cf970a3278dcb1_JaffaCakes118

Files

0c3592303d8af8eca2cf970a3278dcb1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ