6ac0b4613d3200e7f607d63a90c9f5e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ac0b4613d3200e7f607d63a90c9f5e6_JaffaCakes118
Size

2.6MB
MD5

6ac0b4613d3200e7f607d63a90c9f5e6
SHA1

8a206e444c0c05f2c7c0e9e57151ab3c69db123e
SHA256

0dd4730d29b2378e1e086e187576cf8593117d9590e477b5641e05b9118d4b22
SHA512

4fda53472884caa80f798188dd2c7a5897d9c9f4d9cbdacad7abdb1ddb735e87eebdb6eee1e4c5c790a8d94b35243cdcc2ea2aa841f482663e21266b12be54f3
SSDEEP

24576:rSPix9UNwRuOspW0BT3KKOfE+fFpjLBISqNXnPlugi63FsMg9QUIVAgnzuMLVsnf:pOT73H8pjLCSqBwgwgzFQj9CwHO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ac0b4613d3200e7f607d63a90c9f5e6_JaffaCakes118

Files

6ac0b4613d3200e7f607d63a90c9f5e6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ