c0ff670fb8d546cde72475f096f65cac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0ff670fb8d546cde72475f096f65cac_JaffaCakes118
Size

704KB
MD5

c0ff670fb8d546cde72475f096f65cac
SHA1

828b08858b53c7c373ec891e089e5c47845e9910
SHA256

0cea32ba7ca0bd157edef3943bc18b133f7f49e3c2d6cfcdaa3c39ff63c6c9cd
SHA512

448a6bcc44db2cfe1d437bc7afb91345653b9273901e89459cf051d511dac72683c430248bf49071fa6ce9141e2ba9f21f415e78242fe61281d269432a9ea050
SSDEEP

12288:W62YQUfr3IJWMvxRxrd74tts5qw8I5q6zfSwx6xsmVuy:WjYlMvxRxr8i5q6k5bVV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0ff670fb8d546cde72475f096f65cac_JaffaCakes118

Files

c0ff670fb8d546cde72475f096f65cac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Labtec\AppData\Local\Temp\rr1l0kje.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ