6d0b734c695bca5d8c7f86a17f81a826_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d0b734c695bca5d8c7f86a17f81a826_JaffaCakes118
Size

2.3MB
MD5

6d0b734c695bca5d8c7f86a17f81a826
SHA1

cdb0c5d2b637d9775dbf46c337e648ae84557837
SHA256

a8f1befc7ca4af72b2096f16457018c7f5ca9c8266031119f9f6e69fd890dade
SHA512

7d28061f0727b1c40df282def943f4138082167d371c5c58ee62f4fb3a6020b34f728f71be88078ac9ff9c4aacc2397f8c0492b18026b71f627b2aa1a754b7af
SSDEEP

24576:w3GkKOD5fUyYaq38lUbHQnEMsFenH8a1rHURedTuj1vaqbRP2GJiPVqQcSWpFPDx:IGkTUywMYmH86r0RedSBJfhuYmMus

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d0b734c695bca5d8c7f86a17f81a826_JaffaCakes118

Files

6d0b734c695bca5d8c7f86a17f81a826_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

_DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_bss32
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_EETALI
Size: 668KB - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 337KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ