6970193c531a05565475ae6889a2c7c0_JaffaCakes118 | Triage

Sharing

General

Target

6970193c531a05565475ae6889a2c7c0_JaffaCakes118
Size

76KB
MD5

6970193c531a05565475ae6889a2c7c0
SHA1

f46f7e619110499adb25b5f2ce204af07997074f
SHA256

a8e60580ce5fb4a82fce7253bf2b2261d2c6ceeaf44ee67a85a2cbef81e9ba0e
SHA512

3717c5b453dbdb02dc78da281c6216196488c6a63348f52e013f1149004fef24aed604a34f99c14a50b522b128ad438d94fdf9f4bdd8c6665b0b305061fa60bf
SSDEEP

768:zheZxR2mnpxYrdAR5dKhUjtbsDZhuNuQVFwUVSX9PMUO5dO6Vz8TeuEJ7DVL:zheZxuAQ4juQVFwUVOxAmcQSHJ7DVL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6970193c531a05565475ae6889a2c7c0_JaffaCakes118

Files

6970193c531a05565475ae6889a2c7c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Nooby
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE