12c0c69f96cf284ddfef9e0699b4b047_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12c0c69f96cf284ddfef9e0699b4b047_JaffaCakes118
Size

735KB
MD5

12c0c69f96cf284ddfef9e0699b4b047
SHA1

1b5f3202e33247c92886aa0407588043585c78f8
SHA256

e97e330b83990eba759c04b3d0273f0387011a64886783319010fff08ac95596
SHA512

660a5c9578918f8f706d11f1ac19ad40104c47bc9477f8053bfeecf75918fd4df0a0b784cf274f0e47ad7fcf567f6259695bfda6f021a035ac9c5b89e6f6b42f
SSDEEP

12288:x8cLcyKSeIN+ebHjpHpVNsNDD8YPbHxyrAcgf0GZ+ORzVm:x8cL99zN+ebtStyrAcgfpAOBVm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12c0c69f96cf284ddfef9e0699b4b047_JaffaCakes118

Files

12c0c69f96cf284ddfef9e0699b4b047_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 725KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DalKiT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE