0ce07b75169e079c4130546a0e5c6bb2_JaffaCakes118 | Triage

Sharing

General

Target

0ce07b75169e079c4130546a0e5c6bb2_JaffaCakes118
Size

2.6MB
MD5

0ce07b75169e079c4130546a0e5c6bb2
SHA1

4006ace7bf1a8bdfe7e6d96e990a36ef44f576e0
SHA256

aef05bb6c96aaf447e93b1847a77599bc0df2c96e8751828b8953ed3803318cf
SHA512

ec6dd8441b75917fdac723c388ca6ecb972958ea5369ca0bc9b7cf67d04fc800e37b2eb291b60111bc63f31a5293d566e2dec27fc1358484eb726861cb5fcfec
SSDEEP

49152:IbJUPpm3QqlHMmpXJ1HbqscdJGPVjdwFCVeJjZv94ioQu:gUPI3Q36XGLdA9jd2Zv94DQu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ce07b75169e079c4130546a0e5c6bb2_JaffaCakes118

Files

0ce07b75169e079c4130546a0e5c6bb2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 521KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ