6420a53bcddd2898270ddfea2169128d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6420a53bcddd2898270ddfea2169128d_JaffaCakes118
Size

688KB
MD5

6420a53bcddd2898270ddfea2169128d
SHA1

8a9d1ed87f176fbd9a0ae9853ef6c1d7fbe27d24
SHA256

d214ffb7f39dfde63b8696b3bbbe91ccc76039e02ec99f55a121075aa2444801
SHA512

2e7c0bab3c6139f6a0afda7bc3242d491a5e266b69656766d3e5769ff590b183cce470bd3465af396c390d5775d188da75c6a71bbd20673279f757ae21cea044
SSDEEP

12288:Q9gRNbYLDPxzw2+MV3aaliRqSRDEVfYC01D3UzJWrMTr54uT8F:jvYFs2LMbE4DAAzt3UN05uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6420a53bcddd2898270ddfea2169128d_JaffaCakes118

Files

6420a53bcddd2898270ddfea2169128d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 611KB - Virtual size: 611KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata
.rdata
.reloc
.rsrc/1033/MANIFEST/1
.xml
.rsrc/2052/GROUP_ICON/MAINICON
.rsrc/2052/ICON/1.ico
.rsrc/2052/version.txt
CODE
DATA