6095a4e3df42c01b2984849968a1c4f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6095a4e3df42c01b2984849968a1c4f4_JaffaCakes118
Size

600KB
MD5

6095a4e3df42c01b2984849968a1c4f4
SHA1

52aeb69f504f95bb6c951e31187bb5ebb1110b50
SHA256

606f51ff936bcc099935a7b89ecfaaae135468a28504904e91f6c237c25a50c6
SHA512

ff98a40c60fa819a3dd58ba2f4c29c7ba2b5d2e2d683089b70ff69177cece02d9823bbcf7a5bfe3daeb53ddaa471bb71d6c24f14a78f44d6fd23b6b99e11ca5c
SSDEEP

12288:gMqC2lSVX+O6MXaBukplqBYc8KuCsEYW1/ykSUhI:gPKH6HBlqUb8YW1DSg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6095a4e3df42c01b2984849968a1c4f4_JaffaCakes118

Files

6095a4e3df42c01b2984849968a1c4f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

@@Socket@Finalize
@@Socket@Finalize
@@Socket@Finalize
@@Socket@Initialize
@@Socket@Initialize
@@Socket@Initialize
_Form1
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ