0cd26a22a1fe6fd97f896fa21e1e7f98_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cd26a22a1fe6fd97f896fa21e1e7f98_JaffaCakes118
Size

293KB
MD5

0cd26a22a1fe6fd97f896fa21e1e7f98
SHA1

6645d24c3f9fa40f1c7b389f76543316d34711c3
SHA256

d6ec55a5d790956fc7ebb213055dcd550d6d8ab51aa716a391efc0e7adeb5cad
SHA512

bb52d20e5b2cab978f67146f587a66389bd537a5424c708066ee9f8ffcf005771d9a7fc4ed079d7c4ddf8b8d044248f63c7594fd48808cbf7bc4fa7e570cd65b
SSDEEP

6144:0tLcLlLQYzOlzpt46L405b+bie0UMbfL61mR5wmHq1uUEEyZ/V3cGETL:05cBLTqLL40Buie0BbfamRuT1HngMGEH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cd26a22a1fe6fd97f896fa21e1e7f98_JaffaCakes118

Files

0cd26a22a1fe6fd97f896fa21e1e7f98_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\DailyBuild\sources\Nero8_CHILI5_RELEASE\StartSmart2\release\NeroInFDiscCopy.pdb

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gda
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE