6b562fda8169cccc1e91b3edfe7dd9df_JaffaCakes118 | Triage

Sharing

General

Target

6b562fda8169cccc1e91b3edfe7dd9df_JaffaCakes118
Size

5.6MB
MD5

6b562fda8169cccc1e91b3edfe7dd9df
SHA1

83080714665158b0cee45b65774775280f7d92be
SHA256

5c31bf5ae2c2d0aa0e98d877103ef89627447a29f3a21606ce5d0ba75afc5df5
SHA512

0ba641a99cfdbed762962f6f0a7556152f8adf5837800e53c66513eea67c7207bc0a59c165fdedddb660b1e9f338dbd385078a2b9d766f97c6da5c6bc441f9ef
SSDEEP

98304:PDITk9ULlTg9nKTdJg1xlrmNX3KNluAeS7Cc2zcsmqEsc5caqEPipdQ6:Lak9U5ZcrmNX3tGCNzcsAVPqE89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b562fda8169cccc1e91b3edfe7dd9df_JaffaCakes118

Files

6b562fda8169cccc1e91b3edfe7dd9df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 825KB - Virtual size: 825KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 62KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 240B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ