6471945b551c9aa5d96286573265bf0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6471945b551c9aa5d96286573265bf0e_JaffaCakes118
Size

725KB
MD5

6471945b551c9aa5d96286573265bf0e
SHA1

a7e4f562674091072787fa5180b63e0f1db4bebb
SHA256

9bbe303fb35f91ec80bd6dce01dea2f74728e6ca4060b4a83856331a627c3d11
SHA512

83b3d2223a757c2677c754956ef76bfdd37950616e59fb857d9276ca67527bc9850f9dfc287a2d4e2a13e96e101ce554d99bcfed0d2765e7350dc1c1e0ab5090
SSDEEP

12288:GQe2b3l22GGRLcvJ58LjKSTVMOOrpahSP2Zr8Yh3uSOnEd7ElhHWbBWT7HaxcawY:GDK3ljtd+lobuHBF9m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6471945b551c9aa5d96286573265bf0e_JaffaCakes118

Files

6471945b551c9aa5d96286573265bf0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 507KB - Virtual size: 507KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE