c0e18f3031e26b2450ccd534803c3e89_JaffaCakes118 | Triage

Sharing

General

Target

c0e18f3031e26b2450ccd534803c3e89_JaffaCakes118
Size

528KB
MD5

c0e18f3031e26b2450ccd534803c3e89
SHA1

6587a5fe5f2ef9e442b99d23aed1dfd773a46477
SHA256

42cab15674cfd090dc2d1c6deb10cb5efbf0ec47b59e7a3faf877a5b6ea54581
SHA512

d1ed8a45d766195f4def09e21e65c07334d718dd7b61682cc7f3c95a5a0f0883784564be43e4156ce3f38dab3acd3f2bc30392431cad5e6107944590a201a983
SSDEEP

12288:mJsdZ+wGZKxxfG7jbq9rP76uxPKK+0yTLv8t0tev6+:B/5tffMjbq9rP76u39yH86tm6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0e18f3031e26b2450ccd534803c3e89_JaffaCakes118

Files

c0e18f3031e26b2450ccd534803c3e89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 627KB - Virtual size: 627KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 56B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ