0613c2ea54f34b5da154227b4104ba06_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0613c2ea54f34b5da154227b4104ba06_JaffaCakes118
Size

312KB
MD5

0613c2ea54f34b5da154227b4104ba06
SHA1

106796a52096468b893ee49c65a8593e4c25ddfe
SHA256

45c00f23b3f8525817160223a6d759477347fef335725a60962b6499da226b84
SHA512

072a06a4213d1b9ddd901af732bb27a9b5c5a51a8c791c6c8e099604209383d009f67b6ad2143d3546ed0221ad326803557c2d0fa4966ab5439a6ef4e7ca0537
SSDEEP

6144:jNl7+8FrgAm+2Qf4rx06zljZGtc9yvG36s63q4aY1j6VPfpvr/a:vqmr8Qf4lZE+qs6aAIPx2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0613c2ea54f34b5da154227b4104ba06_JaffaCakes118

Files

0613c2ea54f34b5da154227b4104ba06_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.klmhk6
Size: 1KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hg9zho
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ysti3n
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.8g$5un
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cnlf08
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.a2dr3$
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$7x8z3
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 650.0MB

.data
Size: 286KB - Virtual size: 288KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE