f6b8e17744f57bf9a51f57e4a17a0c52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6b8e17744f57bf9a51f57e4a17a0c52_JaffaCakes118
Size

95KB
MD5

f6b8e17744f57bf9a51f57e4a17a0c52
SHA1

0380b6850386e68afdadb2e4e92e5b48699fd6b8
SHA256

f3c86e2df043b62675b3fe30497c90251ee3636244a22ac39ba29b30b7143435
SHA512

88165d896ee28f2fd6d2b2a4c6fb8645a3f6de09ea82d0e9250baad5277003c77ada492d5f9bc38125ab01ad4f1f4ec23e89451b233d818a762008992defb94a
SSDEEP

1536:jt7p9ocgGZIO6O4cuI/4+qo7mwyg4ToH/Ohr/b+Rmh9Ta4L/RDhLFW:Z7pq4VKq4+q5RTob+9Ta4L/RDhLFW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6b8e17744f57bf9a51f57e4a17a0c52_JaffaCakes118

Files

f6b8e17744f57bf9a51f57e4a17a0c52_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.oicq
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.hight
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.make
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

movei
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ucsina
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ssloev
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.come
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ