6a2829c9ff63d44e93a80c0981113151_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a2829c9ff63d44e93a80c0981113151_JaffaCakes118
Size

737KB
MD5

6a2829c9ff63d44e93a80c0981113151
SHA1

e3efe634ced08b3f10cad5bad51e3a0e243e3c9f
SHA256

995095ed30bbf2df0c3caa4f92e17f3551125ae73b962ecf2712c5de3ce9351e
SHA512

e358af51dc3808c84c191e6d393fc1e7e41dfd152ea23c7e06df4feda1b875600ed3d4fa76ffaff45d6512f12261e51b6f1ec19de17d072c33621981880a862b
SSDEEP

12288:/Cf35kIivKFEOHBoqAd7bwBRXt1vkg54jTGCfSVc0Ab/KYdd:axkvKFEO6qsIXXt1vPev/b/1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a2829c9ff63d44e93a80c0981113151_JaffaCakes118

Files

6a2829c9ff63d44e93a80c0981113151_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 634KB - Virtual size: 633KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ