c0d0b41a38ec4e69bdd99bbbdcfada66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0d0b41a38ec4e69bdd99bbbdcfada66_JaffaCakes118
Size

204KB
MD5

c0d0b41a38ec4e69bdd99bbbdcfada66
SHA1

6e15bb443ef558d6ca3fdb37643626b9d0173445
SHA256

8b806500dee38824b854e9d5d4ca7d5df244a8653dc45bfec538c5dc28a5a15f
SHA512

9233cb73db24ed465776e615ae2c626274d459058adf9abcd4003a325c9bf769ba0e7444eab9b89165f80e7cfb901f0167351c88c159cc13fb76d1625377eac5
SSDEEP

3072:GG+cEv6DBDoypSR66ImKpIvbfaLNxkmpapYuK69h9uWNF5TdR6ssJ:G/7yDBDHQRvImlvbfYObKh6huEJDsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0d0b41a38ec4e69bdd99bbbdcfada66_JaffaCakes118

Files

c0d0b41a38ec4e69bdd99bbbdcfada66_JaffaCakes118
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 214KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ