c0cb7a06842970028fa2cba040d9eb9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0cb7a06842970028fa2cba040d9eb9b_JaffaCakes118
Size

218KB
MD5

c0cb7a06842970028fa2cba040d9eb9b
SHA1

15899a29db152ec74b383e6f7ac20793e2c3b508
SHA256

3adbd1e7c9d9b6e243ae0eb3d1ba549a2fb5df92ad696c5e1c62d5225cb0f75c
SHA512

dd932e1c59bc804bbf69a7e8bb822ac5382d01986010d5506873d3108c18da7dfa688d978e38523c8d7ef7be1530f1f94c60aa9313be97b011503858f55a57e4
SSDEEP

6144:G/0h9R4z8sxt2A+9De2m7kuqW5MVAwywDaDKWZCCz:I0hAzZGtrXJqjwDK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/listr/LOISFORM.exe

Files

c0cb7a06842970028fa2cba040d9eb9b_JaffaCakes118
.rar
listr/INDEX.INI
listr/LOISFORM.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 457KB - Virtual size: 457KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
listr/loisform1.ini
listr/默认.ini