f6a16d1a9c4f20e556f09da9d0548617_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6a16d1a9c4f20e556f09da9d0548617_JaffaCakes118
Size

52KB
MD5

f6a16d1a9c4f20e556f09da9d0548617
SHA1

69f15cb871f972c40c94d90520acf4a72c3a7162
SHA256

e6c38a70520b0664c719e6c2d0d9673d2276511114f5a742c2d3fef9efb0a25e
SHA512

1bf2834a5f125b80701038297713ff6e2701c4a42721b6d613b18f64f7f5113a2cc8efb0ac2860489bf5e1a9f3946c95783fc8956234a965b83a5c191aecca32
SSDEEP

768:jJOwnVkJdvk27vkKbUS+PBNaPS+e2/+8tOcQrgM1FYRJ828rtsoFtwZvt3Y:jJbVe/kEU7D02uRCFYRJSlww

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6a16d1a9c4f20e556f09da9d0548617_JaffaCakes118

Files

f6a16d1a9c4f20e556f09da9d0548617_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ