0ceecd69cce965890f5ef09f091cb714_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ceecd69cce965890f5ef09f091cb714_JaffaCakes118
Size

5.0MB
MD5

0ceecd69cce965890f5ef09f091cb714
SHA1

6b15a8ed284a160e4aaa70f2df1bb77c6bb42ee9
SHA256

ec73275a00af756f5554638518fd84a28bbba06232dfd9458402847ff8e97f74
SHA512

8d22ee0472779a8cd4014a44d4f22b77e23b4095788406ff40e7d96f81ce8e8f0b6372719b60d9652418b3138d2f18a904d0d6c41a6183befb0a836bdd485ae8
SSDEEP

49152:9dTweV4wyDPCfMpbKccEVCbdIZcTxFolb3IR3SEOgQeReA57tsPxZiv/OdShjgMQ:9dowyDUMNKc5NgXRV7Gbiv/bxQ6Y//t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ceecd69cce965890f5ef09f091cb714_JaffaCakes118

Files

0ceecd69cce965890f5ef09f091cb714_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 32KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 88B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ