6570f12155dd6b0a766a79960a95f6e7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6570f12155dd6b0a766a79960a95f6e7_JaffaCakes118
Size

69KB
MD5

6570f12155dd6b0a766a79960a95f6e7
SHA1

f8cbec3c749ea09f993e03e9ef967fbb8ee8b095
SHA256

f0d6f2502fd04ae92ef3ed6e5e3e8337ad12d0f49e96c3e6aff67244bd4f958b
SHA512

c5412e508e17dddb71fa36a9ce66dab78c041da76a9de0c0d546455f2e9c263dc5376288f5d17239d282d34d0f9c7dc0f3c99c94574b84d3ca1bbc320534be99
SSDEEP

768:nEWatJ6I2hXzRls84E1R3gZYE4ubb+zIXX+pCl8VMFYLscnFK3:EWatJ6jhXzfs84k3g3b38VqYVF2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6570f12155dd6b0a766a79960a95f6e7_JaffaCakes118

Files

6570f12155dd6b0a766a79960a95f6e7_JaffaCakes118
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mwmamys
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE