6124cff913654bdedb182e9d5112c133_JaffaCakes118 | Triage

Sharing

General

Target

6124cff913654bdedb182e9d5112c133_JaffaCakes118
Size

699KB
MD5

6124cff913654bdedb182e9d5112c133
SHA1

86bfc5ea57acc24c97cfe248c69bcae578d66550
SHA256

6546e8938efd039112285a9a0916c260c2c4cd5817aadf5e246fc37492eb5936
SHA512

e21b03cf639233f3794621fb583b28f9408dc195f289a8ee2ca1db1b5be793d8aba683f2b1ec0f7fc94395b7e0291f3a6e117fd6aeecb5497dedc6636229210b
SSDEEP

6144:aKsvwXb1LfkGB1usvJR3djOuY0yKzOI23CBdfNJ/9+FiIMPs1nV/Pxwar6qhKSax:lsvwZJRdOeyuOI2alz+4aVrrthVax

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6124cff913654bdedb182e9d5112c133_JaffaCakes118

Files

6124cff913654bdedb182e9d5112c133_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

spider.pdb

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 459KB - Virtual size: 459KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uro
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE