c6cc71b4b8384c46b438a8332aa498d7_JaffaCakes118[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6cc71b4b8384c46b438a8332aa498d7_JaffaCakes118.exe
Size

464KB
MD5

c6cc71b4b8384c46b438a8332aa498d7
SHA1

0dae1175942a8e5072bdf08adec00c71547d297b
SHA256

ac60f9b725b4f7f97b96a23ef7df30765245bae4ec49a7fc18cec13599e22d7e
SHA512

42ff86326ee83eae7aed6ca055f46ae0b2c5db4e0de46da138c4d3a7a44bbd7701a7ab5605beb5bc0b10583dc4d4261d5fa38c5c8c7bd46c362ebb8f30a83446
SSDEEP

6144:iQkWcDpi78KSrafqV5areuyFwBqgmGNGXN/O8OCLoTgV+w4W5XY/kIU03ReiRzmr:iQlc87eqqV5e+wBV6O+kO+3aXYU03f8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6cc71b4b8384c46b438a8332aa498d7_JaffaCakes118.exe

Files

c6cc71b4b8384c46b438a8332aa498d7_JaffaCakes118.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ