6623fb13005e79692ef8a3c564bfaf13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6623fb13005e79692ef8a3c564bfaf13_JaffaCakes118
Size

432KB
MD5

6623fb13005e79692ef8a3c564bfaf13
SHA1

a53cd4f888e92d2e6d306f622e324a8939b84048
SHA256

6e5163cdfc6c3a870577e1c72d445a722bf30c7a941afe122875b61c971a11b7
SHA512

5d50fe447ef06671d0ae101ed734dc3715e39c95a0b47375ecc351bb0c6628018f3659c6409584245c64919e7fbcbc2e78a96a520291e1a8445ed10f85e9a56c
SSDEEP

6144:c5mKIAwDs5gAfQKIBDukVx7kNk2q1Odt2xAKLMleiqkg/C7W9xIDlNJ:c5tIAGHK8Sk7wNk2oOd0l4WF9aR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6623fb13005e79692ef8a3c564bfaf13_JaffaCakes118

Files

6623fb13005e79692ef8a3c564bfaf13_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ