b6a826d75ee728debc0256fdb26458d4_JaffaCakes118 | Triage

Sharing

General

Target

b6a826d75ee728debc0256fdb26458d4_JaffaCakes118
Size

414KB
MD5

b6a826d75ee728debc0256fdb26458d4
SHA1

1a0fabca40e5c8984d058ec27a238bb5eca34fa1
SHA256

f6ffd85316380190d1ff59875ff7fdfc62093c80938368f38487e3be37f0dc80
SHA512

3f7ffdc73da9eb5065ddc0069c8d7a3974a3df663ca843e1a6b8fe083154455d4032e5658863519f932cb10d8bbda05726a147d1712d1a93c88dfbf8ce4abee3
SSDEEP

12288:OExbyegt/jr7/WoD0BViFzYEZ3XNRADp/:OETgt/HaoDVZZ3X7ip

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6a826d75ee728debc0256fdb26458d4_JaffaCakes118

Files

b6a826d75ee728debc0256fdb26458d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

CODE
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 127KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ