f6975a6983de039d56b817b6d0b5497c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6975a6983de039d56b817b6d0b5497c_JaffaCakes118
Size

5.5MB
MD5

f6975a6983de039d56b817b6d0b5497c
SHA1

c62cad61159fae4a89d3abd50724591435fdb7f5
SHA256

da2f010a0c84cf9356621ce261c6d3a5ca9c2bc6330c56a609b4a4577fe112b0
SHA512

47da2d0962582ae89f7a07e301688cd5ef666d6b54052e86ab1d3c28a2a139dfef1cc9b56a03a0dfebb507d8558eca62a2b52d3c6353f4ecc2999e4b6a84da7a
SSDEEP

49152:tvGIuxrb/TkvO90dL3BmAFd4A64nsfJ1XU59mMJETIR1iVhYOxbJBKqKhmYYMNnc:tvGfXdmAQQQQQQQQQQQQQ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6975a6983de039d56b817b6d0b5497c_JaffaCakes118

Files

f6975a6983de039d56b817b6d0b5497c_JaffaCakes118
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 725KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ