0ceda80cb4816c34a74bddf9db477756_JaffaCakes118 | Triage

Sharing

General

Target

0ceda80cb4816c34a74bddf9db477756_JaffaCakes118
Size

137KB
MD5

0ceda80cb4816c34a74bddf9db477756
SHA1

3259277de2e0918d306e415b67fe58c12d86df93
SHA256

cc7bceb3a5fd1dc95c4dee2d9c0a81de9ed2b08154dcc6cf1106607bfc8acc9d
SHA512

ad73c9e9714cfa8b265a9d2908f34e70018321bae70813bdbc1da313026f693921b90cd1266c78f201a4e826441777ec19079b74b21ed5a28df2c1df5d1f211a
SSDEEP

3072:8Q0ZEp6IEoBm/ACg2wB+PhnB9Wc8EobMuDhnR8RnvYT7829JnU82VL:8Q0K6IEaRCsE9DxqSO7829Jk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ceda80cb4816c34a74bddf9db477756_JaffaCakes118

Files

0ceda80cb4816c34a74bddf9db477756_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 600KB - Virtual size: 599KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ