0c3dae6647f255c76e9cf82801645d8a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c3dae6647f255c76e9cf82801645d8a_JaffaCakes118
Size

8KB
MD5

0c3dae6647f255c76e9cf82801645d8a
SHA1

d7d8bf1f0ba295d83b11630e05372a8e999e362b
SHA256

cc70d7f22e35d89a521b5c75497157c2ffbdfd87906fd7619a8b72b84d402268
SHA512

f00f7d253fbb6dccde2ca653921066da502384968c3c01b1185ee9a411563e4f808b4444b11a6924c67d421a9c56718570b52eee3e7ae89e71bd3a290ab25b59
SSDEEP

192:xYIoYbABCpzYs4auvumF1kPhYFeqZZo6/xcqyzK9D:xRoYbjpzYGu2s1kPh+eqz/OJz6D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c3dae6647f255c76e9cf82801645d8a_JaffaCakes118

Files

0c3dae6647f255c76e9cf82801645d8a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 57.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ