0cc0146a89e977b0ed0d113c42181c87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cc0146a89e977b0ed0d113c42181c87_JaffaCakes118
Size

3.5MB
MD5

0cc0146a89e977b0ed0d113c42181c87
SHA1

c3bf4b046f610181fb7c64972baaec93bc2b25ba
SHA256

9ca5a81ed5e8534ec24ccb1ec2256c30fb94866b8314f28817ea5a9808e5ef7b
SHA512

90a43035c6b4be9b1fac29845958286e740e91731db188e8328ad69a1b16feedc8952b4dbb7d48154eb073cf3c8ceac6e65f580370090d8eabc29f4a1892f5a7
SSDEEP

98304:CgXyMNcYSU0Gi2HSjTpfPsRlw9oAcx+zhDbCjOjgw5Np:CgLmYSfHFnsRqLzBGajgqL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cc0146a89e977b0ed0d113c42181c87_JaffaCakes118

Files

0cc0146a89e977b0ed0d113c42181c87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ