6784cf49b74465c4855f9a795fd90c1f_JaffaCakes118 | Triage

Sharing

General

Target

6784cf49b74465c4855f9a795fd90c1f_JaffaCakes118
Size

50KB
MD5

6784cf49b74465c4855f9a795fd90c1f
SHA1

7e711160783f490821f90e83666c8ac9d1771e9f
SHA256

7796c454d0e2b48bccf8edf1bbc8c90219b1ddee912fbc7bad87a61101c2d3e3
SHA512

d14d6ec5810ce86b7201d0d66fdf747fe36663209e3cb005a9692b2487b3165f4bb8f62b3a6ba6168964236cd2cef8394d90fa487f1525441c32a3380933ae7e
SSDEEP

768:TnqxQ607x9/Qy6fBERS0uOsiI0fZSkwk/OKsavYQrpcYbPsDJFVipARb06C:TqxQ6OxcwS3tGsTk/OOvY8O/HVc6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6784cf49b74465c4855f9a795fd90c1f_JaffaCakes118

Files

6784cf49b74465c4855f9a795fd90c1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 593B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ