61506d4efe5c7771e648c9a28c7d4adc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61506d4efe5c7771e648c9a28c7d4adc_JaffaCakes118
Size

159KB
MD5

61506d4efe5c7771e648c9a28c7d4adc
SHA1

b9385872c269aafd7af89be86c8d7a133c962a89
SHA256

c8a08aa90b2fcf2b87262f076781a35751d50c6a824ee4678b16787d1ded0414
SHA512

69a121088f8b09324cc4edab1e8f05280e8841978b6afbd723066cae9ea732d3b9d3229568ebc7dc20425d1683960c3bd54d1cc9bbdd9eebfea7c58f241f72cf
SSDEEP

3072:8Q0ZEp6IEoBm/ACg2wB+PhnB9Wc8EobMuDhnR8RnvYT7829JnU82VgFzuKY/VTk5:8Q0K6IEaRCsE9DxqSO7829JnrY/VTkGM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61506d4efe5c7771e648c9a28c7d4adc_JaffaCakes118

Files

61506d4efe5c7771e648c9a28c7d4adc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 600KB - Virtual size: 599KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ