6a522fa85369820a910771470f6ee0dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a522fa85369820a910771470f6ee0dc_JaffaCakes118
Size

461KB
MD5

6a522fa85369820a910771470f6ee0dc
SHA1

fb61ee5942411f2b40246ab25c230b705dd2bf68
SHA256

7ed303836bdfee990c534645ec4152ed4274120a0fba81d22a0a553295f5d78d
SHA512

f80d3335c07add08c7b4308547b340d458d2a904723fc1cf78ac8cce46e20092ef001849a03ec022dfe9f6ea0be2a505c765291e691c549b874d75d2fb7a526c
SSDEEP

6144:E+Dr44nDWgRAkPjPEr2GQn8xID0DMFC7lDuce7dnXM5fFi1FeiHUHO18QGhgNzR:tVR3PjS2GLxe0DzcnJngI1kid/nR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a522fa85369820a910771470f6ee0dc_JaffaCakes118

Files

6a522fa85369820a910771470f6ee0dc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 451KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 355B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ