c0a4c813abf1227bf09acb24c6b7e782_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0a4c813abf1227bf09acb24c6b7e782_JaffaCakes118
Size

857KB
MD5

c0a4c813abf1227bf09acb24c6b7e782
SHA1

ca8c0ddb5f2a8d58441050a398d6c0afb34a96f3
SHA256

b4c11b8ca8f0ca749c6a63f09eaa71e13dd3564a564434a240dd03604b263611
SHA512

7ae1971f569576882287af191d87c3dfa142f2aa0c2d5e46a047c3ec725acd1852d3ad5ffcaa7989c60eeebb9cf1937f0c52108fb1c1c10958ea05750b3e9efa
SSDEEP

12288:FGcoX5LsdHfxCf/LY80pUX4DwJ2+B05OEkz4+WqEe4/sVO:bamdHfxCfTgk4E4+O4lz4Fe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0a4c813abf1227bf09acb24c6b7e782_JaffaCakes118

Files

c0a4c813abf1227bf09acb24c6b7e782_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ