6f2821017dcb582cce8cae29c345f391_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f2821017dcb582cce8cae29c345f391_JaffaCakes118
Size

195KB
MD5

6f2821017dcb582cce8cae29c345f391
SHA1

6163d5b0bb73bb623278922bdcff3536d69ba0ac
SHA256

e6ada891dfa5d153aa59b962f85ae1f81599ab9b7597d42bd1aefc2b252c516e
SHA512

474afccf1dd8029631dbc86b6769a0b00d284deb9424cf5eda6b41d7f83a1327aaa992cc9dbebf9d482a68cd4efae7150e5de9430b48ad290c25cf67a49cd941
SSDEEP

6144:ZbPDymkjak9qY/wDt3tGDopAXdfrqmfg:Zb7ygkzwDKDVrb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f2821017dcb582cce8cae29c345f391_JaffaCakes118

Files

6f2821017dcb582cce8cae29c345f391_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 410KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ