0c6f32918bcb4689b6ed9eec3478f1f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c6f32918bcb4689b6ed9eec3478f1f8_JaffaCakes118
Size

1.0MB
MD5

0c6f32918bcb4689b6ed9eec3478f1f8
SHA1

7853c9b88cfa6b799cc0a5614579bb1c2c77545e
SHA256

ce33233eff2bd6d8ea5c12eecdf3a33dfa193a8f34c3f08ae875dabb331b971d
SHA512

95bf11f7f9ffd5470b1ab8fb8424d4741a34894d973a61e684c30906dce95eeca08c2c14e33e0aac9ab655c2ca30fdebfd5b92ce92f72100a0be17fca250dc24
SSDEEP

24576:AWNpsJhUG0UVo+tgvb+HV6Fbme1TnB1o/1woR:Hpal0U7tgDoimYTB+/11

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c6f32918bcb4689b6ed9eec3478f1f8_JaffaCakes118

Files

0c6f32918bcb4689b6ed9eec3478f1f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ