03c6ca0a20d0d78eaecc794da18d41ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03c6ca0a20d0d78eaecc794da18d41ef_JaffaCakes118
Size

741KB
MD5

03c6ca0a20d0d78eaecc794da18d41ef
SHA1

cf1a7a9fe6dd0148b0d4573f7cffe2d1d7753994
SHA256

b259b3dd1ae42686d129ce486a0938eb73f5cbfceb5ca16f3575240295dbe8b7
SHA512

37e0dec76a1c91bef9ff78fd0df2c429036452e7c30e5ff23103e5f6b592cf41c76e7a62f92b27496e6cdec737ef4265a0564c77d235e90271b18d12400ee4af
SSDEEP

12288:iPAui3jyDvMj7KqZk8aNSsRu68QBSu9dAR71oMmd64Hy:iPNiOAj7KqZ6L7BSGAR7B4Hy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03c6ca0a20d0d78eaecc794da18d41ef_JaffaCakes118

Files

03c6ca0a20d0d78eaecc794da18d41ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 515KB - Virtual size: 515KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE