c6b34186da416f5cfd53772e75ca4642_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6b34186da416f5cfd53772e75ca4642_JaffaCakes118
Size

8.9MB
MD5

c6b34186da416f5cfd53772e75ca4642
SHA1

2f7e1cc23a8c0a595532f3177afaf735f158deff
SHA256

ba0b58646851b82d7b2596fe3caf4f572d75766c921a341828afa26ee10f9b5a
SHA512

06c1448efe100445c57a286f55509c1e34d5e38ca6533bd42425c9d1cef086a7c6b27871020b7411810aeba46018e1641ada6182dbb374b28a3be78a6570ce89
SSDEEP

196608:8Iazg7DSmIazg7DSmfIazg7DSmIazg7DSma:Gg7usg7ucg7usg7u9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6b34186da416f5cfd53772e75ca4642_JaffaCakes118

Files

c6b34186da416f5cfd53772e75ca4642_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ