606d4ae06cb320aa9c9ede350aa971d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

606d4ae06cb320aa9c9ede350aa971d6_JaffaCakes118
Size

195KB
MD5

606d4ae06cb320aa9c9ede350aa971d6
SHA1

4241b5cf9655c7f946b2d652a8d2aa12b3d3d12d
SHA256

72446a1d122891b9b82087c87838450613f26f063cc236c357d8d83317aa75e7
SHA512

abf9f9042d2c8bcc0bb8d5bf5238b0456c0d513b3624a16e983c3823c46200b4799c942cd232d99bfa519a1a6e9c2599411fc4a42322e6a02763a87182a6ab76
SSDEEP

3072:/Pddwme/N0I7bT/dQJcgivSbPM49UoCix0HLgW+jGspbVq24QizEtn5g2ixZSSgL:dZ0SI7t2/iv4i0uL52tZ49EtnSpDgA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
606d4ae06cb320aa9c9ede350aa971d6_JaffaCakes118

Files

606d4ae06cb320aa9c9ede350aa971d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ