0cceef4775fc3afafe302e0171cdbb3f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cceef4775fc3afafe302e0171cdbb3f_JaffaCakes118
Size

67KB
MD5

0cceef4775fc3afafe302e0171cdbb3f
SHA1

170813f7614b574c73bd989bd70eced02688fb95
SHA256

6f4e03bdf4550c5da08fc1c97f096206ace793f02c21e7fcd8381c3553c721a1
SHA512

e7523d12365819109702cd7e93720e22a8d314d90e2d690e6d150a1bfa7fbb3dfaeb8ca07dc46220e6133b76e2242a346c97773e963702853aaceea8b13d99b5
SSDEEP

768:GBb9CbbAfU/J0m3I2/HXxBNKtPuNsZP4GcEhtzALy9QGlvn5OrcPtl/G3NxmSyCi:Achh0UfBBNpFgzHblvnNtmNxOua

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cceef4775fc3afafe302e0171cdbb3f_JaffaCakes118

Files

0cceef4775fc3afafe302e0171cdbb3f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 649KB - Virtual size: 649KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ