6845b0f416c1ecd4b890fbd8e2b05768_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6845b0f416c1ecd4b890fbd8e2b05768_JaffaCakes118
Size

748KB
MD5

6845b0f416c1ecd4b890fbd8e2b05768
SHA1

08e8aa634fcb92694e15615e4d22a43032fbe249
SHA256

37f1da33eb69ea546ac1fc4fa034e158eda95cc9f3ece1443026e60135f64d9a
SHA512

bc294a5bcb3c5d3157c698b1ff31737ead8c7b2efa7421bf8f165fb0f277dcd6ea7f35ca5853169bef822e811f999fb7ea96d31cfd16c46701408adf031879b8
SSDEEP

12288:Pg+kbsOaL4VfgbAwv3mu6qCevxIJbt2Y3qyF7YHmyfzBdfGnfhSXeiZ4w:PP2aL4VfgbAwv3mCCevyJB2g5eLN9GnD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6845b0f416c1ecd4b890fbd8e2b05768_JaffaCakes118

Files

6845b0f416c1ecd4b890fbd8e2b05768_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 492KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mackt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE