6726e13d54379e0d2f5469e178469bc8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6726e13d54379e0d2f5469e178469bc8_JaffaCakes118
Size

423KB
MD5

6726e13d54379e0d2f5469e178469bc8
SHA1

fbb07ee2bcccd1a555a4a1ce8d0ae32401015a21
SHA256

6c008aea9d283aa7dd31775f0979bf2a3f2088d090a3ae23862a5ee24f950ef3
SHA512

34dc31301392ff21654404b8408952f3797e61f909b012d16a49520d89ec4a5905019b63df37849640f15b62597ae7314e9417023cb8fe4b2c1c624e2d8b68a4
SSDEEP

6144:JqG7mUAK9eQ5C8mQNy77s/K62Ay4o/MGsvSGw7kOhCr70U4o99icSRK:t7meAOl47h/MHqr7krb4E9i9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6726e13d54379e0d2f5469e178469bc8_JaffaCakes118

Files

6726e13d54379e0d2f5469e178469bc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ