6f436a36e4c046f47f01047407f777dd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f436a36e4c046f47f01047407f777dd_JaffaCakes118
Size

14.5MB
MD5

6f436a36e4c046f47f01047407f777dd
SHA1

a1d3fce2e2671fcc463bd2fd196a3549d424b8b6
SHA256

3464e771a2d63b3118194c05953cc17846db8f577b3d9508d8d3cde229ddda90
SHA512

f86e924d69e654d23aa812d78374161a9ab891062050ff73d297c5db977d6000084ef8210ef77293854481c8bcc222ba5ea1c090e9213da7461ffb607ac6466d
SSDEEP

393216:jNmc++go4r0h7FxnaTwT8KC6owdC0VLKIZFqXcIM+:Bmc+xo4rW7FxnaTMfHC013+XfM+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f436a36e4c046f47f01047407f777dd_JaffaCakes118

Files

6f436a36e4c046f47f01047407f777dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ