0c1678fd463be25cd50872e10b089a83_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c1678fd463be25cd50872e10b089a83_JaffaCakes118
Size

506KB
MD5

0c1678fd463be25cd50872e10b089a83
SHA1

f94ba2cd014c9ec2ee98c967efdb5420b6614707
SHA256

e28af676653b846fabfacb4d66df054ecccf0592014821c5ee34ef41379ab0cd
SHA512

1e8698aa983e957fd37bf7a5bd9818cc8f54fa90b05d106139643b8e3c9122ff7f697459b318c8b5d955bea585fbbee3f1de74986ffb24305f65bca514a89200
SSDEEP

12288:AhRP6M1ZRW60u8+G3INS6jez1ecwKyXP2wXP6+p:ch1Zg+G3I7jeYPXPtXPp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c1678fd463be25cd50872e10b089a83_JaffaCakes118

Files

0c1678fd463be25cd50872e10b089a83_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ