0cd6c28482ba1ed59e699196a1caaad0_JaffaCakes118 | Triage

Sharing

General

Target

0cd6c28482ba1ed59e699196a1caaad0_JaffaCakes118
Size

517KB
MD5

0cd6c28482ba1ed59e699196a1caaad0
SHA1

8a99acf7b42e93abb4b1665d62dc5eb3ae3e2829
SHA256

a481e7906a6e66068337801368d035eb755a78ace5a27c145fd82d1b5954961e
SHA512

35592dccfcfea6bf1ed717a8ee11e0b40198fbbdc4988b14ab8955b5b7521bd8975a3c4aff8a53f306539f7997378cb200d55c74f45c608624b1f67323407c89
SSDEEP

12288:GdAVqy+4E8IIbFalAEE1M3nLMqqWptsBYRn:maqeELIY2/mDREY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cd6c28482ba1ed59e699196a1caaad0_JaffaCakes118

Files

0cd6c28482ba1ed59e699196a1caaad0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 409KB - Virtual size: 409KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ