6a41c824c43214fd876988532f93c378_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a41c824c43214fd876988532f93c378_JaffaCakes118
Size

28KB
MD5

6a41c824c43214fd876988532f93c378
SHA1

0decbf57dea9a23a353d9c647aa32e0968c5eecd
SHA256

dc8ecbb31749a99316ac9c6318fb190c0bd88c2f4d863acd6711e50a0f8b7dcb
SHA512

45eac6a77de6b9f0238fab6881d5be5e07a1d2a79c8c066868240cdcb23d9c73bdd88ec6446fec0f8d89c6fc3fbeef05c0a25f5fa47d40a6613053d14c87f30d
SSDEEP

384:/oCgTnlpDqMxgcn0HayuyLhhgYprIbGqlycX2YrXMgx/cyFQcHa:/vwqMCcsaUppIGWycL8gx5Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a41c824c43214fd876988532f93c378_JaffaCakes118

Files

6a41c824c43214fd876988532f93c378_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 597B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ