a6d0c6fbedb03d25f448810ba11b1ee3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6d0c6fbedb03d25f448810ba11b1ee3_JaffaCakes118
Size

810KB
MD5

a6d0c6fbedb03d25f448810ba11b1ee3
SHA1

fd74e7ac0a4f0d05c9b1f909cc0a6b35b1bf5802
SHA256

eb9b77f9fb49b3fdeff14b787eb4482189e1840dc550e3d199f797cab1aaac2f
SHA512

4a94c7ff03ba934f5ef0d89e6ae04117839d3de6537869f312182220baba75348bdbbb10d5e2e69a8863215b43d9670a9558ced3ec72a7ade72c1ad0e2c999aa
SSDEEP

12288:CzA6K3p4lVVpC+vb/uQkNvVruUY3C+2SCFdncetKA6Ra1rREp9o3CV/FoMM0:CzBwpyPvb/eVjYR2DHkKu3VqMM0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6d0c6fbedb03d25f448810ba11b1ee3_JaffaCakes118

Files

a6d0c6fbedb03d25f448810ba11b1ee3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 564KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ