6777c47ba00e0de97100b1b95a8ad45d_JaffaCakes118 | Triage

Sharing

General

Target

6777c47ba00e0de97100b1b95a8ad45d_JaffaCakes118
Size

7.3MB
MD5

6777c47ba00e0de97100b1b95a8ad45d
SHA1

f0dd62570d92bc57b4f6169d8ae1271595aaa746
SHA256

6e66229e6f2b1c9e863af726f817557a98c7d95b27d20cf13b1c206bd8c1bb88
SHA512

50f0bcee700f132682716cf2ce81af18a5c698b65c37b4c6cbd113fd7a21d8ba47bc7a4175ad78f1b6d7fc3a1aea385d2b008e7ee20997656794a1e2d5ece7c0
SSDEEP

98304:O9UM6s/EryT4M3C5Gi6klvi/t1a4oGaPR0or2xaARgLoMzSGRv5uzBzchGxbj62:OSAEk4AC+5sJ0oOGeyv+4hS62

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6777c47ba00e0de97100b1b95a8ad45d_JaffaCakes118

Files

6777c47ba00e0de97100b1b95a8ad45d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\V3_11\V3Setup(local)\release\V3Setup.pdb

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.heb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE