6a44e1519586f7da94a6f08ba41a2e6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a44e1519586f7da94a6f08ba41a2e6f_JaffaCakes118
Size

504KB
MD5

6a44e1519586f7da94a6f08ba41a2e6f
SHA1

696048b3355ef275b40cfdf7ed9ffef6c05fe602
SHA256

1a1ea9fb41f6c08013074a0f5d0beba713f3805417e5f7569b8086f6dd21a0ea
SHA512

5f9e0932e606fb0e58046e7a1abb67b6f4a7ea7431f8314f746aaef74001d8ca39f443fdb54e9a3209e8a85b082b9e7bdc952c1957048ee2d65ed8fc9f5ef70b
SSDEEP

12288:70bwWFSedzRqQF/SfSySC+N/xNo+dFZ4sEYwjIN:70bwKRBRq8/SfoOnju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a44e1519586f7da94a6f08ba41a2e6f_JaffaCakes118

Files

6a44e1519586f7da94a6f08ba41a2e6f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uavdb0
Size: 56B - Virtual size: 56B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.$wtrvt
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 498KB - Virtual size: 500KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 64B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE