6204e7449211c56d6d76d491046a555e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6204e7449211c56d6d76d491046a555e_JaffaCakes118
Size

477KB
MD5

6204e7449211c56d6d76d491046a555e
SHA1

671db4665af866b5afc56f5c3488fed19bd27094
SHA256

3d3ec1a71e4a2c435445c0d9c629204e23d81b1f66a12651204f069e9fa8e507
SHA512

4caad7b41adfa46f2503aa7cb566d50f70f0f9e9d9ce693efc6b9b33a5019e88e5f8fdc10e026fc841afa1c55888d62a920adde07b7307a8d26bbca223b5b1d5
SSDEEP

6144:XkY6BQe+gNcSaHzsaQWXy8L+9zOT6o4jyLRx1sRIxYYzbIHZsmpPlhB:09BQUNcSaHzsAOzONRxiROYYzbIZ/pd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6204e7449211c56d6d76d491046a555e_JaffaCakes118

Files

6204e7449211c56d6d76d491046a555e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 387KB - Virtual size: 387KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ