6404b8ae98b99a1e2509673b84affe3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6404b8ae98b99a1e2509673b84affe3e_JaffaCakes118
Size

289KB
MD5

6404b8ae98b99a1e2509673b84affe3e
SHA1

175bb39cd82a786f227ff9ecbe23236a7054dd01
SHA256

668fe7c15ea3780d1ba49edf51a907af79156e23fa9af1f7e94f1d592e4c5a59
SHA512

0231540b58495f9dde85b687d45c6ad4b04c83ad6dd7f8d20fe0938090c8870d5dc403d5bab39268b2d87de3830b73cf60f7d734ccd9fa02c8565391a13e2a59
SSDEEP

6144:WaCqb6P1ERsv8H/RKavG+jey5KZqJbwC7DmRTxTHQlmzL7I9/Y:BO1EivKTPWq2RdamM9Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6404b8ae98b99a1e2509673b84affe3e_JaffaCakes118

Files

6404b8ae98b99a1e2509673b84affe3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE