6630204b4299b7d1849907e8a97c1860_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6630204b4299b7d1849907e8a97c1860_JaffaCakes118
Size

4.6MB
MD5

6630204b4299b7d1849907e8a97c1860
SHA1

950f69660f4692cd1d8d85a75f82b5b04f059b7c
SHA256

763a56ef4de191c0659abade98ff866eec5e27ed42a62ccea96bb9d45871f2a9
SHA512

734974dab1c4c3a532374b18ffa2bfada9371dbfde73cf7e930f540bf4e9b49d287e9b4057fe369084ec2f56831451736b17647f302bf80628dd9b5dd911b94c
SSDEEP

98304:rK98edfVCJR0+VkZOWzisYDkk+tcDsfeno0xjPx0Fq:Kd4RxVLWzisYgG5VZPiFq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6630204b4299b7d1849907e8a97c1860_JaffaCakes118

Files

6630204b4299b7d1849907e8a97c1860_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE