6860e12ce89f06f60ded0854b6259536_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6860e12ce89f06f60ded0854b6259536_JaffaCakes118
Size

130KB
MD5

6860e12ce89f06f60ded0854b6259536
SHA1

78455a39ab3cad3a5ed6083660a994a080151d58
SHA256

b8aa5d9198fabf4ac1720e7cb087dce51df7a5c5a15440c6507be98d42685409
SHA512

853d6766811e32efffb6ddc2270fd2643475fc5f53152f3d831d4279ad37f44c17b601ca26a351721346337bbf44f1aef8d96640789de508c58d70c89fcf778c
SSDEEP

3072:teCMTD8yrkLE2W8TXVwaJMYttbSsB5lH0NyOstLNXtG8T0e:tehNsEwXTqPszVs+fG8T0e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6860e12ce89f06f60ded0854b6259536_JaffaCakes118

Files

6860e12ce89f06f60ded0854b6259536_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 98KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ