6998c9747f213597ad2e5bb389684855_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6998c9747f213597ad2e5bb389684855_JaffaCakes118
Size

644KB
MD5

6998c9747f213597ad2e5bb389684855
SHA1

2a3022be83ea8508c658d8a8174ae2cbdc7cb582
SHA256

53169f1da18724894f97411091c524e80a3d2941da7538d94dfb15264133367e
SHA512

b5e92598758d15cba18faee4557d844b127a3d12bfbe41408f8899c00fb24cb4afa58866dfafda3ca6d8c6ecfe88f8c7cd1a61a2e6c27ebc7028c4273ed82b8f
SSDEEP

12288:Gi+4xyfT6gUqOK2cms4qy+tenwoiy2m31:TgpUqW1RrwZbm3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6998c9747f213597ad2e5bb389684855_JaffaCakes118

Files

6998c9747f213597ad2e5bb389684855_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 587KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bbt2008
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ