61b8006dcecc11ea70ee3d37983b1d75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b8006dcecc11ea70ee3d37983b1d75_JaffaCakes118
Size

799KB
MD5

61b8006dcecc11ea70ee3d37983b1d75
SHA1

d2113976f92df217b5ffddeb12ae7c7d234b33e6
SHA256

ab9009781ca6e8be22535e4a23a306b7108677e6128d69c18774030a0cf92f65
SHA512

ca0c16e15d03e2047ecacffaa318c44d2bb34f2ac1f77226ac967352404636a03155ff111262a86d174aff4553493794436e9c26d2b53fdbd5ad9aa8f3b088a0
SSDEEP

24576:tEFcx6BnPxRlfK+G9PeO1QxSAHs21woHB:yc6BPV3Hr+oh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61b8006dcecc11ea70ee3d37983b1d75_JaffaCakes118

Files

61b8006dcecc11ea70ee3d37983b1d75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 5KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 780KB - Virtual size: 784KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ