646b8b7cd81a6889be7857982b67f74a_JaffaCakes118 | Triage

Sharing

General

Target

646b8b7cd81a6889be7857982b67f74a_JaffaCakes118
Size

363KB
MD5

646b8b7cd81a6889be7857982b67f74a
SHA1

91c1168f8103c58c10128645a01351d80715f30a
SHA256

7b0f779f080924ab250e4c2ae3203a6d35ee1ce5cc102c44879dc4d65c6e0a54
SHA512

3a6269dfd37e122549540215a87d66c2e92f9e9be00d0cf0ceae708bf868d73335c77885a3cdb9f4ce92f8b61e748b04e684a0ebd804e5d391386e9803db937f
SSDEEP

6144:l5GTvMA+2QgJgYHX6XnfTSyo6gA3j5/E2rNU1TAqR0zG/vakNmobwnNoSZH:l5GTvMAqaYnNo6gEGEaZAI0zG/HbeoSB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
646b8b7cd81a6889be7857982b67f74a_JaffaCakes118

Files

646b8b7cd81a6889be7857982b67f74a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.stealth
Size: 1024B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspr
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lcc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.y0da
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspr
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 104B - Virtual size: 104B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ