600a1dbdb1104a2432e7c335d7dc91d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

600a1dbdb1104a2432e7c335d7dc91d0_JaffaCakes118
Size

551KB
MD5

600a1dbdb1104a2432e7c335d7dc91d0
SHA1

b44c3b70f363752a4d9ef2c9322ae9b541f3e26e
SHA256

5a6c663f8469d1be7a61760329f3d4f9ca4cbfe3f460b006d3272b6546a4ef77
SHA512

e24c88d111c75e4f7b80ec1b007e58bdc0649abf1878a1c737a7d4ce0bfcc053edee53268d99b3b9f9d002f72232e0c316c24945c1a25b917c21e1670d1d4cb4
SSDEEP

6144:YtsUaKyAevgRUVdbd+pItTGozrwQKshQw289B3+LwoROosmscyDW+lSBtXzHP1MR:JKyAe3VdpR0QvmwHqWoOcykdPZc3jvn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
600a1dbdb1104a2432e7c335d7dc91d0_JaffaCakes118

Files

600a1dbdb1104a2432e7c335d7dc91d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 448KB - Virtual size: 447KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ