6539a058733567f0b77f9219f2564fa0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6539a058733567f0b77f9219f2564fa0_JaffaCakes118
Size

481KB
MD5

6539a058733567f0b77f9219f2564fa0
SHA1

247002ee2c90da9cf1722233bf6a6580988f4f62
SHA256

bfd5a86a57d56bd2435eff065c51fc2e0d97c124ea2c76ebd20c11332aab2b6c
SHA512

b7278997e5025db059d12a686c5a5b27c14f9ac10c40be47b63a3eb0083e0819378092fa07dda652cea07a49ffaceb794fadcd8a14c8b9558370bf1cd763a8c0
SSDEEP

12288:eQXft3jLYxJvILMYNB7yBBN4z7bR1TxHKHZd13J+mlGjo:eQXpYx+bsX4VLHKH5Mmln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6539a058733567f0b77f9219f2564fa0_JaffaCakes118

Files

6539a058733567f0b77f9219f2564fa0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ