6550b3819f947ce01ffcc265a1f6c272_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6550b3819f947ce01ffcc265a1f6c272_JaffaCakes118
Size

56KB
MD5

6550b3819f947ce01ffcc265a1f6c272
SHA1

0e71d3b192c57c70ee21f23b8f77a7ae0988100e
SHA256

4496db75339dd9eb2f903e63995d4d253ab8926b837ed21f6d947b334cf8cf93
SHA512

06fec7e474cb338f657f7eabc0cd6a1e6097c4608b4b4146719b94d6eff420dae3d8bbeb1ea29d923430eb5f08b6111f8a1af5166489a69fb69d5c6c051ef930
SSDEEP

1536:EvxRjkS9JsaC8+joCTvvm98ehwRuzs7Bym1:cjkuJswOvm98ehwt7R1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6550b3819f947ce01ffcc265a1f6c272_JaffaCakes118

Files

6550b3819f947ce01ffcc265a1f6c272_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 849B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ