6ad2b0b497c96a69891ed0bb54ecf6ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ad2b0b497c96a69891ed0bb54ecf6ae_JaffaCakes118
Size

3.0MB
MD5

6ad2b0b497c96a69891ed0bb54ecf6ae
SHA1

069268df197cc88807b9e7847e087d7c39c00016
SHA256

ca526416e7ec2b7cf9f99155ff38a06bb54aacc628c227b0e6e378f0f34010b5
SHA512

3dc1209a6ec911c1b97b07e83c264a6867a68816b8b2aeba85fa1ccf5c5205df739f0f8969bc7c41fd07e4f6dbf98a48fc418e8cd9f2fa72d367ccaac3ca159b
SSDEEP

49152:wf7u7awdPbQda+OXU+vaGLlVELxlfAU7d4AW/C3iHDqC4j:v7zd0dEk0z6LApu7J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ad2b0b497c96a69891ed0bb54ecf6ae_JaffaCakes118

Files

6ad2b0b497c96a69891ed0bb54ecf6ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 9.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ