6ce570077f47102f77c8b47ef7765b3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ce570077f47102f77c8b47ef7765b3e_JaffaCakes118
Size

2.3MB
MD5

6ce570077f47102f77c8b47ef7765b3e
SHA1

7c51958ab58ca9db0495e0cca063ea82a9769eef
SHA256

54deb3979907b099dbd567937182c7faa71e59140155430286beae74a1bf2383
SHA512

35a801bfd89ce1403cd46474fa9046f7b4b316f33564f72f388c2e5859436036dae5d30f62cfa318dd3a385e1038b2062e0534fedd015d26114be5925a35c94c
SSDEEP

49152:VEWSqWuLIBqm2YB4AGic2OlLaW4/ciebrtv8Ipjgg+nCM1jL3qE33lPH+SUx0xA:V9SqWuLIBqm2sGn2OlLaWViEGIpjgg6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ce570077f47102f77c8b47ef7765b3e_JaffaCakes118

Files

6ce570077f47102f77c8b47ef7765b3e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ