0c202127b3822d480e47a95fa2acc792_JaffaCakes118 | Triage

Sharing

General

Target

0c202127b3822d480e47a95fa2acc792_JaffaCakes118
Size

25KB
MD5

0c202127b3822d480e47a95fa2acc792
SHA1

e8fbd52a4d1882966f14303abdb79cfb4de03202
SHA256

6691826d2e3be7385897af53fb14d178c1459a462b4b9f06220c7641953702c9
SHA512

447432ccda6fd69aad1ef5a65f91b4efb829435236a8f971457cfee1331423c809a2cb3d28c0ce4fe840ff32d4c2d6025ed5565a137bdc97795d0ec4b3d12c5e
SSDEEP

768:oVWcqPml/SfC98l5JB6YXPnNiPij7g2VG8s:OWqafC9KB68LjJM5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c202127b3822d480e47a95fa2acc792_JaffaCakes118

Files

0c202127b3822d480e47a95fa2acc792_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 649KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ