6098ed99d7692492b6b38d71d9461206_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6098ed99d7692492b6b38d71d9461206_JaffaCakes118
Size

496KB
MD5

6098ed99d7692492b6b38d71d9461206
SHA1

73c6c0bc466e782bf8500075fb1999e9f60b37fc
SHA256

13fef6b8006c1d208916def9a9e29ce7148bfddea8d755b2cedef9f03ecbed12
SHA512

af67a022d3b04c28aeffcbbec483c3067dfe0fb6316e7567085c43e9a4050a84e0628031a7e095ae32e19d9ebbf348ba8076ccf2aae39d8c3c8cb07e984463dd
SSDEEP

12288:NX0t3RC/97RuoKtLpm1EwtLpm1E2oSvvI1WY3OfeTIwtfHDISAY:KyjuoKtLpwbtLpwBtvLY3E2dtfHcw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6098ed99d7692492b6b38d71d9461206_JaffaCakes118

Files

6098ed99d7692492b6b38d71d9461206_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msinfo32.pdb

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mbqfjul
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE