6951455738094fb619bf1272e640be4a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6951455738094fb619bf1272e640be4a_JaffaCakes118
Size

357KB
MD5

6951455738094fb619bf1272e640be4a
SHA1

631dddb9602c18a7862db887b4c0d294fd0677fc
SHA256

1de834fd8b13b7b5137a21f7f9259ecfc14d769da116deb569a656d0bc72257e
SHA512

ecc1cf188061acb56a25c5744f546e79e9cf2c61f47676175d1b1e21f4ff9089c8f1f72da473b4164bc9d157535a1dbc476dffbce8f58c226ab31f2eee73fd21
SSDEEP

6144:FObF/HlKi20I3CGGffpjDs3VjR/EkC1Smu8wmu3O8wr1qb2oWRto2fkcEuoxy+Yq:BlnHlql/J+W51pIkPC2Cf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6951455738094fb619bf1272e640be4a_JaffaCakes118

Files

6951455738094fb619bf1272e640be4a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ