6af5171a5e5bed6d6aa1680cbb47c398_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6af5171a5e5bed6d6aa1680cbb47c398_JaffaCakes118
Size

630KB
MD5

6af5171a5e5bed6d6aa1680cbb47c398
SHA1

3da145a078337279c3e633d762455b3c4ca245e3
SHA256

d4d5c67486a0c2876a0e66ef53eb8e765708130425cbfd4d8f5641c522090dc0
SHA512

4fb44e70af2e20d27002e62a14776997ddcb2fd1d8ef3d14724d9d678356e1f3655ad7c94683e9de81af2e85840731672a83fa29fe34b121f32a4572174f344d
SSDEEP

12288:UigdX3w2g8zqZjSNy0xamali9VPQKPZg8zG:DgdX3wv7YNo/895IZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6af5171a5e5bed6d6aa1680cbb47c398_JaffaCakes118

Files

6af5171a5e5bed6d6aa1680cbb47c398_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 456KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 387B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ