f6402dbc03a3a7d204031e3efff60567_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6402dbc03a3a7d204031e3efff60567_JaffaCakes118
Size

385KB
MD5

f6402dbc03a3a7d204031e3efff60567
SHA1

697fb513f2bf2b4914c2b64e7a8549789f27a47d
SHA256

7c85b0b946384d28a0d45a452e0517f443d6695b01fc7be0cf7dfa323b4ac419
SHA512

68ad480b8d07c667444fefec0c8628f32ef1f3f2518082d2ce4a51cb1331cd782624b274ab4ae473a5005b148155231e9f0e5a4f0dc94d18ac6979c91569720b
SSDEEP

12288:8uo5mrzDk24QnzSEWkt1g/w/klAMwSEkB:8uYgLzSot++VkB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6402dbc03a3a7d204031e3efff60567_JaffaCakes118

Files

f6402dbc03a3a7d204031e3efff60567_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ