06e8f864194c97a30b8938c6cea1fc81_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06e8f864194c97a30b8938c6cea1fc81_JaffaCakes118
Size

2.4MB
MD5

06e8f864194c97a30b8938c6cea1fc81
SHA1

9a6ee2d2a3fbbe73faf09c02c26d2034ba5794aa
SHA256

9d56a19016e7b083a21758c3d8127a5bbbff86fd2d7092df7c40d98278cdbb9b
SHA512

e080bbd212f796da0091bc4cb9acd278c40dcf84a3bcddfe161b5f977e77dca5d5497489350415143fde754df6500f00ddfc697e6dad4415d3e1f517c699fea0
SSDEEP

49152:76dZA3/pB+VVU4LOmhhawZcgGjxfMwquIhe/o2+RfyBmy02hvgCL19E5UrM:edZBs9PwRMfMbuIiT+4M2gCR9PA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06e8f864194c97a30b8938c6cea1fc81_JaffaCakes118

Files

06e8f864194c97a30b8938c6cea1fc81_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ