0c6f3901748c255cc9dc87191f1e9d4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c6f3901748c255cc9dc87191f1e9d4f_JaffaCakes118
Size

184KB
MD5

0c6f3901748c255cc9dc87191f1e9d4f
SHA1

20dbe9a55dbde0561b6ba7969b572ee5292cf9ea
SHA256

e98f490256346fdc26250f8fe663318ec62c7602a11ec2a9681e3076fe834a6e
SHA512

c4a7749f125cc2d0e7f68e1ed51293f25d9335bd8a8a081c396b68fb62e47db24bec0dfa2b967fb48a1a77a3a7a6724db1092e8d7004ab266edc092257a75ba7
SSDEEP

1536:Mb2JUbFtaFRn9AWtmgXs0o94VpfzOcZeRV/PcwjK8t/8yTMU:3JUbFIFRi8mgXvo9CacEvPZ+6/rTMU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c6f3901748c255cc9dc87191f1e9d4f_JaffaCakes118

Files

0c6f3901748c255cc9dc87191f1e9d4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ