06611f8e2da0b65d0e6bbfe1d9a50765_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06611f8e2da0b65d0e6bbfe1d9a50765_JaffaCakes118
Size

452KB
MD5

06611f8e2da0b65d0e6bbfe1d9a50765
SHA1

1169f6734610dcd18126f7dce46ac0dd9c766d8a
SHA256

f9801d1743c1ce7645cd03248c1bc915293d1fb9c7ef2b8ebc3762aba71e7eb3
SHA512

f1300148e4cf669b9780fc4672deb9ae86d694135d4975a113a34370856aed388ae8119b43f245601bd9f3a864005ccbd64d884a852ce0713f8cd7f54032e89d
SSDEEP

6144:iQ63BGGQ8v3a5nvynbt7Foa4hvI/Ns2V+dB7GYbh5y54d9N6aI0p7KiwlI:E3BGGQ8SxanN/NHIB7Ps4dvrI0puV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06611f8e2da0b65d0e6bbfe1d9a50765_JaffaCakes118

Files

06611f8e2da0b65d0e6bbfe1d9a50765_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 326KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ