61b1670eb995da147b877d61ad6bb417_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b1670eb995da147b877d61ad6bb417_JaffaCakes118
Size

371KB
MD5

61b1670eb995da147b877d61ad6bb417
SHA1

16e4317768548c8fec59ee0641014ae7e05dff98
SHA256

2ea6f43511bfab0ecad3447c4ca89b2f416504584c4bd9d1b1fef40a522291fb
SHA512

f9fc7d9460df2458fef6c1f153e643d863ee69ac11aead09c044de4194e109facc4c244e5a780beb1b82c09aea9c6654934632a4b206d4ddb0f5ec2d39e1889d
SSDEEP

6144:bAdFh7YlZquuU+agKuD3XvH+t6FA8CskiSQHYy4qHg51gtUf0Q0Sql:kvh7Yl0mUXv9FAZMSQQqAzLfrLA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61b1670eb995da147b877d61ad6bb417_JaffaCakes118

Files

61b1670eb995da147b877d61ad6bb417_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 314KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ