f6104284db95025999cbfaa253951760_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6104284db95025999cbfaa253951760_JaffaCakes118
Size

565KB
MD5

f6104284db95025999cbfaa253951760
SHA1

9655b26d88d86fdd247d889325d372a9335782e1
SHA256

e0e207dc7118c7fb3f2ee3950d4e57eb4b3ad238e746ccea0c26f242c436ca01
SHA512

6dd6811f1572eaaf65fa374131d73d1947dd08cdcb98470e4fa5b0d17e043541414d8f6bd9f967321f6ab21dea0f6143e6909951d3079cb427d149599655adb2
SSDEEP

12288:/WOXcuhS7CmrR3DvkVYhp/8+hwIQQrprRlDmQFxw0Fh:uOXcT7dZvkVykJIQQdrR0gxwM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6104284db95025999cbfaa253951760_JaffaCakes118

Files

f6104284db95025999cbfaa253951760_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 492KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ