6162b9cb0492612ecfb476ffcc348bc2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6162b9cb0492612ecfb476ffcc348bc2_JaffaCakes118
Size

105KB
MD5

6162b9cb0492612ecfb476ffcc348bc2
SHA1

3192b02d524fe91dc2a7d8044a03060a61e77b98
SHA256

1a0265acbde2ffe92c98be54d3995ec8c3fab488fb84ff600af55722885eb1e2
SHA512

aaf728cd186ac57f48fc7dd5db2a8982130ae0b0ab4f9b982f3077c91ae02778b730b8c7724b8b7eddc90f60ec19a5baf3bef04ce3c0b03085c69b9496446fa8
SSDEEP

1536:xOp4tWOXbsOFGsJW5eL+1dby5/uGEGt7K7ttq:YwWgAl5eB/D7K7rq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6162b9cb0492612ecfb476ffcc348bc2_JaffaCakes118

Files

6162b9cb0492612ecfb476ffcc348bc2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

Size: - Virtual size:

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE