6a4c55a836b52f1a639c5843ef8f8379_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a4c55a836b52f1a639c5843ef8f8379_JaffaCakes118
Size

163KB
MD5

6a4c55a836b52f1a639c5843ef8f8379
SHA1

be744953640fef3dcf3cc7b6374f51350c8e61d7
SHA256

7469d91cc8321aada042eb4e3666b5fb47893caaed10f1d19418f3854914410b
SHA512

3f03297eae2d352a1c58b5899e12a04628b6ccb0f46c88f8d4854150e0aac229d8cfb93a72860ddd3ef4c9c91b22038400f865cf16a617525544a5639c53dc28
SSDEEP

1536:BXGTcuEhEg/TuY9PRFoLhdrWcENM3K3rjVlWYGQyOWZKqOTSbxgznjozM2W+TTGg:B+cHhEW6qP+hdKcR63rCYWO7z8Q2lOt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a4c55a836b52f1a639c5843ef8f8379_JaffaCakes118

Files

6a4c55a836b52f1a639c5843ef8f8379_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 249B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ