0e6024db11ea04acaa6cffe0d88dfe18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e6024db11ea04acaa6cffe0d88dfe18_JaffaCakes118
Size

181KB
MD5

0e6024db11ea04acaa6cffe0d88dfe18
SHA1

7819f09091bebedd1b446131915ad5cf7d1152c8
SHA256

f5b4c1a6e66c990f270ae796ce8dddf88db885e399b94cf91fdd9185cea4dfd0
SHA512

b3425b1d2e07dc4b169742c1478b25ca1d7d774d55604a342587910a91d8721a307fe0e6daacedd4db40a6fa035fcbe5ca9ee73989b2e2cc80b0d7564dc644d7
SSDEEP

3072:nxUMhBT1DE/H9RzGdo5E2qXx59+v3JuI0ejqVBnzW6/CPrE0DLlW5TKyvFg59Y4A:7hF1o/De20Bev3JuIvuRi6KP/DLlbTTA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e6024db11ea04acaa6cffe0d88dfe18_JaffaCakes118

Files

0e6024db11ea04acaa6cffe0d88dfe18_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

DCOMCnfg.pdb

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.nkh
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE