0c4a34c6314ece808f307ed3908fe1ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c4a34c6314ece808f307ed3908fe1ce_JaffaCakes118
Size

79KB
MD5

0c4a34c6314ece808f307ed3908fe1ce
SHA1

e9c5d811993859fda15cd64f01933c3db0390249
SHA256

8a6ad0f2ad446978317b93e3ce4161f98aa52278e31ef3ad28004e7255eb5bdf
SHA512

0e9df37fd43d5e13bcf1a7ff7a55ec4082d2693ee6ad7a0600591685e30716bfd6651214f5fe06371c8221f79ac470452a3feebb0a99e3da4d014c0357ead19c
SSDEEP

1536:znExun/oJIEG2laOQpDr4Ao2MBNTEj+iLi6Xp1WA31ACDxk:znE0nQJIF2laOQ9riBNTECi26ZAA3mC2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c4a34c6314ece808f307ed3908fe1ce_JaffaCakes118

Files

0c4a34c6314ece808f307ed3908fe1ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DEfggy0

Sections

CODE
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 325B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ