6f8e7536e09f08b79e9417323b1a3307_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f8e7536e09f08b79e9417323b1a3307_JaffaCakes118
Size

561KB
MD5

6f8e7536e09f08b79e9417323b1a3307
SHA1

e23bdd781414534f87114729c9178b7ff88a295f
SHA256

9fea83d7c86192205309a513d8e0c223f8483cdd68dbf1f2853af6ef7433b5a9
SHA512

ae3140cb60c98b7fd78308ac27303087e92c0e9f016ba0e41138e03c58970d7547c22f8bef075b1f9652b77ee3c8b563bf2aeb4c783dd81c7d26b9b1264733e1
SSDEEP

12288:GAeENnsFMbHKlNaNiBN3yJOZLvlsjl6lKNQhm:7BGZNf7GO5vOjOhm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f8e7536e09f08b79e9417323b1a3307_JaffaCakes118

Files

6f8e7536e09f08b79e9417323b1a3307_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ