679d67a0211207e7cb9f34b98c9e66f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

679d67a0211207e7cb9f34b98c9e66f6_JaffaCakes118
Size

481KB
MD5

679d67a0211207e7cb9f34b98c9e66f6
SHA1

57502b6c402ae9e6a98054196209b9c152bca087
SHA256

cec94dd3fa4556c5f3b0f00e3687250413737091b995c69a915c98d1c1424437
SHA512

1b2117463b68b29650bda47c47f05bd549a03b74d69ea25f10d50f9c76562dd7c4314b243f985df08c066fa517de669c6cbc40eb5e1c0f741449d35eef41a91e
SSDEEP

6144:tQ12XkYSkH3KVu5FF52NM/2kUYviDCbJCtECAFoBGAqafPJp/REOZqfi3k28GA6o:G1NYSFVu5F+lmkbOIuafvZ33k56ilKj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
679d67a0211207e7cb9f34b98c9e66f6_JaffaCakes118

Files

679d67a0211207e7cb9f34b98c9e66f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 401KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ