6a267ed40df527ade9d25e20d2fe36c7_JaffaCakes118 | Triage

Sharing

General

Target

6a267ed40df527ade9d25e20d2fe36c7_JaffaCakes118
Size

1007KB
MD5

6a267ed40df527ade9d25e20d2fe36c7
SHA1

17598cbedffeb95b40b3c5b1d7d338453d27d9a0
SHA256

303ea1c5eb325048c2eea2688453799ed2eaa06c622ebf6bd0722de3e03a4f46
SHA512

cc13c5c76e09b6d7d3d7d33436a206c7a57f66b3446915595b89495be0079e994e17c5ea4636078ec02a788373a094cd87bc21d66331a7cb84b88ff9e8867ca8
SSDEEP

24576:50kJ1fQH4TnqSal3XyJmJt39SnZwmtJavdQpK:2kJ1fQMzgj94TJavdQI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a267ed40df527ade9d25e20d2fe36c7_JaffaCakes118

Files

6a267ed40df527ade9d25e20d2fe36c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 989KB - Virtual size: 988KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ