6ab5024b9f4ba289edd518272b120032_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ab5024b9f4ba289edd518272b120032_JaffaCakes118
Size

588KB
MD5

6ab5024b9f4ba289edd518272b120032
SHA1

5b7a7d96c6dae1635809cbb37166b14bc40003fe
SHA256

a7fcb316f17a25a7076236979469448efa292e2959509ec83bde0432809c39ce
SHA512

f37e1f29a72798f9da8dab0943473a18968c0e66eaa94a0adc2333934fdcb69d1b1c9a95f5d1581c03f4781dc759b8ec4e81c1568f8c860d3d0f187d87150982
SSDEEP

12288:HwgYM5r2BsIcnv7XqXv7mgcGbBrZuY+9m1gDKSAT28kdk3:N1rBIcv7uDcGbbupVaTbr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ab5024b9f4ba289edd518272b120032_JaffaCakes118

Files

6ab5024b9f4ba289edd518272b120032_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 497KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 28B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ