0dc9b0ccc952ebe8b3211db582610d1f_JaffaCakes118 | Triage

Sharing

General

Target

0dc9b0ccc952ebe8b3211db582610d1f_JaffaCakes118
Size

30KB
MD5

0dc9b0ccc952ebe8b3211db582610d1f
SHA1

a6cb98a1e9d5d17e65a216da7b98fd7e944ca1d2
SHA256

c599b16b45fb60ac97c93c287b319cdb186798f384b2961f5275f43a9d3040f5
SHA512

0a2bed1e0c5c93c1d2c65e027a20b553730acb529181df55bb540df907596a02adc7ef3a599b6b1e85d62b2bcbc604727022612b5a3277d58ef43d21e505c8d7
SSDEEP

768:JtFgGM+SvLFMO4IoqhahwfhzwOKbEFksg:Ji+SOUoqkO7WUg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dc9b0ccc952ebe8b3211db582610d1f_JaffaCakes118

Files

0dc9b0ccc952ebe8b3211db582610d1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e82dd51b077167be63c004bed23d0c1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep

Sections

.text
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE