c6c567147f85dede859e879fd1aa8002_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6c567147f85dede859e879fd1aa8002_JaffaCakes118
Size

381KB
MD5

c6c567147f85dede859e879fd1aa8002
SHA1

928b3893cd5355aaf502455a1bd8cc228544f5c7
SHA256

6140a41548a076475f6de087b96b80309a5004306366664a028b84cd5b424aeb
SHA512

32d2d64a27d0ecd6ec524f584b3427db08581ad838b9c856bd2c63e29f7beefc245d91ed54dbfbe4067ff084b52049806f0e60e98b5cc07018a773b99abbe217
SSDEEP

6144:AajdMJb6SqIqOq2eJCdlCgyVQr1lonNdO+bfPcvU1NQ:92JbM2yYl9yqeNbtQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6c567147f85dede859e879fd1aa8002_JaffaCakes118

Files

c6c567147f85dede859e879fd1aa8002_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE