6a0a8474454c48f848cbe564154bd8d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a0a8474454c48f848cbe564154bd8d9_JaffaCakes118
Size

249KB
MD5

6a0a8474454c48f848cbe564154bd8d9
SHA1

990697c0ad3f8e6369d280490f460d8aa8f6d814
SHA256

3dce09315dd4fd98458490503fd879ffc7a6147067a319fdb53633b30de51814
SHA512

f68464eea85584a46a4693826ae1a28882f90e370a1fbbda07e4421785297f3a21e529bc5ac839555e76299fd11a2461745f2dd5abf1d95cc1abbe0f251c1122
SSDEEP

3072:5v2JyDp7F5oEixkSxUF5Yua50Z7s6LQy339XM7evv+xJKfQ9Tp+oCwLqOln1:5RF82Sura50+iH5FvGxJn/x1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a0a8474454c48f848cbe564154bd8d9_JaffaCakes118

Files

6a0a8474454c48f848cbe564154bd8d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM

Sections

.text
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 115KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE