6131797c71672c98c33a29d1d16b087f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6131797c71672c98c33a29d1d16b087f_JaffaCakes118
Size

224KB
MD5

6131797c71672c98c33a29d1d16b087f
SHA1

52a5221b77e5443f335d5bb07906cacffe07af00
SHA256

6cb07efe1008c72ddd7bb9f7dd31ea22e3b75bc7729379a4549a576c9972f162
SHA512

dc1e3bdbfb3a24ac591b2b0306fe55fc080c8bff5390e4ccf5b9f190859d7b999c4285fed6ee174105ba5c061cf6de17336c7c0cdd0cebf12d332ce29efe187c
SSDEEP

6144:SNrwGBYwIQxWRrut6BaX/9D+plGPOloWGkJe:SRweWRrvBWDK+UGp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6131797c71672c98c33a29d1d16b087f_JaffaCakes118

Files

6131797c71672c98c33a29d1d16b087f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 364B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tqn
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE