6a2dd21e8b99d1e65c9391332cc4aec9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a2dd21e8b99d1e65c9391332cc4aec9_JaffaCakes118
Size

664KB
MD5

6a2dd21e8b99d1e65c9391332cc4aec9
SHA1

0eb0460e1960ffee4c0e0262b01a027799fd1f53
SHA256

1c18cfa0f32481d96c54ae68a6273687eb0443b5495626ed2ad4f927ee490d4e
SHA512

75797046262c64a0dacaf47a69874678dbbec667c46f6d17e5a222aae999878314cffd66788ebc0945a911a808884e81e869914b3f79c6750077819c1698d633
SSDEEP

12288:X1MWJifZhIgXQKE4OVVpnNkfsJnir3KzTb7/M95ymf80h4m3zZ:lMWJ4nDXQKE4OVVpNkfsJnxzTbrMWmfh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a2dd21e8b99d1e65c9391332cc4aec9_JaffaCakes118

Files

6a2dd21e8b99d1e65c9391332cc4aec9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 544KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.garr
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE