6391d58b962d64c402e52a42a2a5ee09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6391d58b962d64c402e52a42a2a5ee09_JaffaCakes118
Size

67KB
MD5

6391d58b962d64c402e52a42a2a5ee09
SHA1

3106d39c3375956092220d1ac92417939386d8ad
SHA256

18ee13bb5545d3e7633c3b7d5826faa9d2b1614d8ffc7b63750547602b62bd24
SHA512

a39696437f2659d93f6d0b1ae73b7d7dc7956237a3bafb72c965d29bfdb96b1fa5a08b0f4a74015b6437ae437a56cd1c0eac838106d947a104948afcb05d0abf
SSDEEP

1536:QBoWdHaDLw7iJju+EFEJah1B+apGLat5fqYC:tWdHaDfJjwiahOapJt5fqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6391d58b962d64c402e52a42a2a5ee09_JaffaCakes118

Files

6391d58b962d64c402e52a42a2a5ee09_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ