0c065e715d4344eadc8b011cb1aa46c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c065e715d4344eadc8b011cb1aa46c7_JaffaCakes118
Size

677KB
MD5

0c065e715d4344eadc8b011cb1aa46c7
SHA1

01781efeb0552785c5568c6d24e24addd2e174fa
SHA256

791fad8bf2b1a60caab9197037e5d3fce08a461d1c30c1686f2843360e8ddaec
SHA512

6c8ad26c38735650e62f3838ab3fc066b26f3e38fc9dc0b24b4d01bc42834ba8808561365e3bf1ec139e922d83e21fae087a045d25f93f4c9745e56ef90f602e
SSDEEP

3072:MI25FUpOAC5v06r0/M02kaaXL7oaGn+ho22GVJt8Vlz3EO9r+lgbTF3LxP+j1tm:z25F/s1L5ThoU1o1d7F7x61w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c065e715d4344eadc8b011cb1aa46c7_JaffaCakes118

Files

0c065e715d4344eadc8b011cb1aa46c7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 456KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE