6821c5ab9312f67309dbaf62d66f6a5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6821c5ab9312f67309dbaf62d66f6a5f_JaffaCakes118
Size

1.1MB
MD5

6821c5ab9312f67309dbaf62d66f6a5f
SHA1

0048c74898810dcb801c5e7bd0d4ff7f89e88464
SHA256

5e7339ebb4ccac4994702490ed72e58a53eba41d4369fad0cbef3ec3f4e51081
SHA512

2ac8caae1f32b77068bd6b6e400733d979ed36d9762b4c5a0e718f75af2f393f22122e40e4dfdab87f3f801db52919314a14f708f784c616e7f27df846e3ab30
SSDEEP

24576:otUC7uozF4fainK07yrSQCWfxAwNbG7fO:cUzop45oC2gfO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6821c5ab9312f67309dbaf62d66f6a5f_JaffaCakes118

Files

6821c5ab9312f67309dbaf62d66f6a5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 3KB - Virtual size: 980KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.const
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ