0ca3c23bd5296dd39a52382604bc6094_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ca3c23bd5296dd39a52382604bc6094_JaffaCakes118
Size

285KB
MD5

0ca3c23bd5296dd39a52382604bc6094
SHA1

d33b4450823941febf5bf3d63ddf196ac4be8c2d
SHA256

70eaa5d1a8ec9a7c9930eff4e9dd5fe5b180475d88096a85f7d435eb79e676bd
SHA512

d033b73ff77fdd8b48350c78a93070deae4ee1f86a9721d0a7d0a4ebca27eefa1a58ee4dceee6f730871c642f4686e0c8018e600de41bd59501a7d961f84ede6
SSDEEP

6144:GwcaAn70pz2YxSYOw0MiO48ZpCGWCZC3G0YMA/T:GZn70l3xYPOHZpPWeP0RAb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ca3c23bd5296dd39a52382604bc6094_JaffaCakes118

Files

0ca3c23bd5296dd39a52382604bc6094_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ