6650b29c4fe14f0448ce073c591fe342_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6650b29c4fe14f0448ce073c591fe342_JaffaCakes118
Size

2.0MB
MD5

6650b29c4fe14f0448ce073c591fe342
SHA1

89de0d1882911331372db945d8347980fad8491b
SHA256

c006d10e62030d7cbbbcb9016e429536b08126b59a452e28b3f1cb99f3b59179
SHA512

baf5e4d310b679bfe9256488ddeb395deb7e32523ceb98530947ff012b2eea344de5ecb8a2e75d97b376e1011524003101c27eed554087a2ef14e47807da8906
SSDEEP

24576:Zt+PGXJIYJgv8E32bpXnKKLA3FEQTdHUOD0/WkdmKaMaOhhkncgzwB:nJXJQ32l3tLtIHXAOkdmU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6650b29c4fe14f0448ce073c591fe342_JaffaCakes118

Files

6650b29c4fe14f0448ce073c591fe342_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
___CPPdebugHook

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE