c0ecd5a0833ac6b83645c426ef0d3d14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0ecd5a0833ac6b83645c426ef0d3d14_JaffaCakes118
Size

86KB
MD5

c0ecd5a0833ac6b83645c426ef0d3d14
SHA1

5f2e19cbb8a3b2d9782568086b233609c811232e
SHA256

95956968c50757dbac094f7cf8bc89c9d65e3d8e5f6ebfab7b5bcbbdfa8789de
SHA512

7e564fdd0cce28cec5bcbde4885d70758ff443090435f9827d24d88bf9c7146418b14a327842713fec87441478272cc59f7b9efee3bc25bdec9639ebab56a4d2
SSDEEP

1536:xHCdEI9OeojwDRsXauGpLIIkTp7NesfMN1PpsPxja9MbN/y9NvtK7mob:xHC79hYnGyHp7NefRsEGh6HvtKx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0ecd5a0833ac6b83645c426ef0d3d14_JaffaCakes118

Files

c0ecd5a0833ac6b83645c426ef0d3d14_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.pcode
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 19KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE