0c79d2c7bea4338fcb4a02e0fe6ae465_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c79d2c7bea4338fcb4a02e0fe6ae465_JaffaCakes118
Size

307KB
MD5

0c79d2c7bea4338fcb4a02e0fe6ae465
SHA1

76c04f7cfad8b3412499c373e655944b83b69a3d
SHA256

0c7d33655e7dfe09e9b20ce2655a0a5dc093fad6401b07ae8c3e69568df00ed4
SHA512

50974efdeea862d9e9e38b63bffac61048c352e63d2359b1cafd737e9f8a6cc0aad52bbb744a1066d78ad5ad9a1336518ed390cf8090440771350b18962fb929
SSDEEP

6144:2qzVT72Y0SRzinYKTY1SQshfRPVQe1MZkIYSccr7wbstOhPECYeixlYGicK1:2CZ7SSIYsY1UMqMZJYSN7wbstOh8fveB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c79d2c7bea4338fcb4a02e0fe6ae465_JaffaCakes118

Files

0c79d2c7bea4338fcb4a02e0fe6ae465_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE