646f2bfa3f6998930781646c02239940_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

646f2bfa3f6998930781646c02239940_JaffaCakes118
Size

734KB
MD5

646f2bfa3f6998930781646c02239940
SHA1

69221a78091d9853f9adf49b6ea1719efaff5ecd
SHA256

61860be871e8ced74973cd672f1cba9acf022d807264dc28bd19b0fc2ecb1619
SHA512

7ee789b5d74efe3645874c01cbe803ea749f32cccac19f803eaf41c5546113ab9f7ceff9227b40f5f10e8f662626250834a1930d3549ed42a6a73ff3e8d4e35e
SSDEEP

12288:7c//////lmx6x/vwvwX2JHgaagaNcyfBa82kZYvxtntMo7oBpJqZXZGt83djXVrR:7c//////lmx6pvwvwX2JraJmyfgX4Qx3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
646f2bfa3f6998930781646c02239940_JaffaCakes118

Files

646f2bfa3f6998930781646c02239940_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 687KB - Virtual size: 687KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ