6a308dee0c4923561b5a41965e039c90_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a308dee0c4923561b5a41965e039c90_JaffaCakes118
Size

185KB
MD5

6a308dee0c4923561b5a41965e039c90
SHA1

4addfb5b1046763dc4b617d680b1c0a321868918
SHA256

bee31173604e4db9889391a42c2ff334b5c18e9eba785dc0e7d89e6f5099eea1
SHA512

07bd3670e92062de40aea3877e110413759ee33170e4d7d2ed4b868f8692edba99665d158467aec8800e03ab4a00a955d73265a25c5b1ad4e7ec49ff57c2ecee
SSDEEP

3072:MVDWUE//w1naxGOHKSZq2qPaHWdzLbhi6VOjq+QGXjZzxq2sChZ9m/2H1QxQCrgM:JXIKGgKSZX2ZfM6VlQXphsAy2az

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a308dee0c4923561b5a41965e039c90_JaffaCakes118

Files

6a308dee0c4923561b5a41965e039c90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eee9062b8cbe1efb89c250150605b1a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalExit

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 161KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ccp3p
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE