6247f2573fac097cc55a82c9c8bd0e11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6247f2573fac097cc55a82c9c8bd0e11_JaffaCakes118
Size

584KB
MD5

6247f2573fac097cc55a82c9c8bd0e11
SHA1

93da18025b747023807d1149ac9f17f92e6ab6c6
SHA256

0bc3b555b7fac4a79dab0a5df2d11db7401dcb0565bdc650019956b98df309ec
SHA512

09e7bba894117d8d67d8e787e551503ed20b44c4300af3744198901f8ad30c37b5931845bb6c7a59688883129eff772894e82effc8de57a590c1d469dc8873df
SSDEEP

12288:pt6S5liNJbThzVvzXEkns3l0tBfAnJ92skkK09mh:ptR7IThz1zvn6eof2skkA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6247f2573fac097cc55a82c9c8bd0e11_JaffaCakes118

Files

6247f2573fac097cc55a82c9c8bd0e11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 506KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ