6a068fcc3c5a93ea050261f2a5e9227a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a068fcc3c5a93ea050261f2a5e9227a_JaffaCakes118
Size

2.2MB
MD5

6a068fcc3c5a93ea050261f2a5e9227a
SHA1

429ef6e64e6d72125b269937a548cbc1484170c6
SHA256

2f5f984d7555db27361ce3da4f3d9011e9c98259b03e8eca60297b41e5a494f2
SHA512

d91f500e542bbdaab30c8387554ddd1b1d1a94ec51c812335d40014bec5b61d16e6a28c5585ef3ab006e039059f61f7f3311c0b5c2184b4a02c0cc0a0ea641cc
SSDEEP

24576:VgFRhdAl5eSyg6AdsJfZo6lpKhMkmJv+6eIQivZXKJAq2pJpKnCu/0xe+dCN74+y:ahSXLEaIQivZXAAq2pY/Tk7prmN5x8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a068fcc3c5a93ea050261f2a5e9227a_JaffaCakes118

Files

6a068fcc3c5a93ea050261f2a5e9227a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 645KB - Virtual size: 645KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ