6738a68d6ca982d3eb8bb18261ade528_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6738a68d6ca982d3eb8bb18261ade528_JaffaCakes118
Size

916KB
MD5

6738a68d6ca982d3eb8bb18261ade528
SHA1

b28b8bdb0527c9befad62bd93f937f1597a13815
SHA256

8b9dda116a71368a9de721e5cd6c6de05c9f9deb692d7e7f623e60d9a9972b5c
SHA512

4d962c2cda9071fe67bca99db4e70fb7a2906447a85c0516f7793421d9ce4d01c14f573e29fafe0c6fac9d4e77ee3a508aeced37aeffaf63267ae8b8f975c340
SSDEEP

12288:Pw5wNzoYqZtfEJRplx8Y1tcDiYifuMPcWTb0vLwySQ5xH:PBGYkfGzVcDiYimM0DLwySQf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6738a68d6ca982d3eb8bb18261ade528_JaffaCakes118

Files

6738a68d6ca982d3eb8bb18261ade528_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 888KB - Virtual size: 887KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ