6671a40a62059a61e88acfedbb50e943_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6671a40a62059a61e88acfedbb50e943_JaffaCakes118
Size

509KB
MD5

6671a40a62059a61e88acfedbb50e943
SHA1

c181af4e7aaa44d2d7296bc4d5c326730842958b
SHA256

dc27cf28a5a89c176c98a6237ddd4ae49555cb0bf061bcf5242606939fdd68a8
SHA512

f35907a22074ff91a9eea471721e4ef07ebc20d32ef6973b32c6678beb6d08606a58e8d659e366d687bdd0a405db2cb630c0ec09b1c6ec92aa2a078e31b52045
SSDEEP

12288:4cxtcde1//jkx4U1TvL5Kc50NcRjZGWXWlU4lWu5eT:YS/AvBKu0++WXwU4MuYT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6671a40a62059a61e88acfedbb50e943_JaffaCakes118

Files

6671a40a62059a61e88acfedbb50e943_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.icode
Size: 3KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 3.0MB

.idata
Size: - Virtual size: 456KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.engine
Size: 501KB - Virtual size: 504KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE