6610511ca3894701a5e96435bd82e53a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6610511ca3894701a5e96435bd82e53a_JaffaCakes118
Size

1.8MB
MD5

6610511ca3894701a5e96435bd82e53a
SHA1

c027991c4856a3b2aadb2ffe43b1bddab7f1c73d
SHA256

3bd46f3afda125f66b883c23ddfb25fc23c458c19968d5b641525ad8b488567a
SHA512

5f53c2d4ebccc832e3569804876812bc00883a56b1f50d00c8b99f62cadc0e10d4ce0a18c638f58d00bcce25702c31be8d4bd6e0cd018cdfa97e67cc9684273e
SSDEEP

49152:5auTPgwpDF4krZWR9aSU7uricT+3Hq0inXBgJ:QEPpUoZu9Tsib2qfRgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6610511ca3894701a5e96435bd82e53a_JaffaCakes118

Files

6610511ca3894701a5e96435bd82e53a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ