f6be0320f9c6d7010a4f1139ef1a7aeb_JaffaCakes118 | Triage

Sharing

General

Target

f6be0320f9c6d7010a4f1139ef1a7aeb_JaffaCakes118
Size

46KB
MD5

f6be0320f9c6d7010a4f1139ef1a7aeb
SHA1

baa212f97d9de8181283b773277258e4e81c4261
SHA256

882ebd2168069d9b21d17c39507ecc73ef04c2435e87a51b67c826c48679ca6a
SHA512

836c7390216716b41cabb54900f001c36b7dcf421eb4b39e0e12b2c024848e2a7f01f929c868915814cdf9bb959f7130f077d745e65d4b4b77fde3f498cfcabd
SSDEEP

768:MgUcvx0pu9UHA9KOpKyKKIFbgwcbvvaMjmiuPlxwgsuI/64/:MgUd/iKgKyxIFbglqzwYG6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6be0320f9c6d7010a4f1139ef1a7aeb_JaffaCakes118

Files

f6be0320f9c6d7010a4f1139ef1a7aeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 597B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ