c0ef1b1004c937b9110a106245e85a5d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0ef1b1004c937b9110a106245e85a5d_JaffaCakes118
Size

62KB
MD5

c0ef1b1004c937b9110a106245e85a5d
SHA1

6e7fa61e778919d89939d5baa6bb04cb95915fdc
SHA256

150d905d2eceb5190a7249f4d60d9158d7a94b2be399cab36e072d0e3b2c6c7a
SHA512

30ae70c26683c498f9d2f87a8eedf677d4d71e0b2bdb0d26ce5a6a125157fefc208c4d4a9c5e573c85344a1b1c8a7afb3935905f0b02672b5c6eb8c5c2414952
SSDEEP

1536:O6vbCU6xrLUllvivbyYi/mlt+050af8Dc2KKSn1Mw5A5IA:JeU6xrOhivbyYi/I1Z0FKruFT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0ef1b1004c937b9110a106245e85a5d_JaffaCakes118

Files

c0ef1b1004c937b9110a106245e85a5d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ