6754cfdaf6b5487ecb821181118b9d6a_JaffaCakes118 | Triage

Sharing

General

Target

6754cfdaf6b5487ecb821181118b9d6a_JaffaCakes118
Size

802KB
MD5

6754cfdaf6b5487ecb821181118b9d6a
SHA1

ff400d290b0749dc26149746e0e9419124312a5c
SHA256

c7f746f3a931a594599809c6028510e36f40bef75f79db6552b8534896c8214b
SHA512

bb101690a9e8fa6fc63b92f399b3cfb0c29477f1eb0ed3d0f14a68fe3e439d0becf6fd9ce340562e5628b58637ff2d30f59b9272ff7b31b5c082a1366f4f4aa2
SSDEEP

12288:EkaUCoaryqBhxJ/+anNLD5Ejj1UdY6dRgKk21Y9jqd39uVqeO5o/HPJQ:EUXjqBl+ES1NeFe9jUuVq7K/Hi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6754cfdaf6b5487ecb821181118b9d6a_JaffaCakes118

Files

6754cfdaf6b5487ecb821181118b9d6a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 699KB - Virtual size: 699KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ