f6a8e67dea2d9d3796f9f9f7862b0544_JaffaCakes118 | Triage

Sharing

General

Target

f6a8e67dea2d9d3796f9f9f7862b0544_JaffaCakes118
Size

105KB
MD5

f6a8e67dea2d9d3796f9f9f7862b0544
SHA1

67eeba8ade764445e3551a04fe1832ea7480f7cd
SHA256

5ddc8403ff377599e7b622b9c3cdaf2755244dba80eaed26318983f6b59120c0
SHA512

c3b4e2b41d5c23adf2fbc7a9407410b134ad8551ddb19705e5d6747100b6bde9dcf3cbddbb5e73658b4ebb354a6e3521dee718dd3625b3a59d82e0b016b2b9d3
SSDEEP

1536:G0nGMHIYuhaZp2KZrXVIBZW/x/AvCGrCZ3ojFXX2TXA+RxI+LbZFt0KOE1uIcKiI:GYtuaDxZ6eCCGGZ4jGk+LN3LOEOIpW9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6a8e67dea2d9d3796f9f9f7862b0544_JaffaCakes118

Files

f6a8e67dea2d9d3796f9f9f7862b0544_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 91KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ