6b012615845c1236d6ed9c77ce266197_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b012615845c1236d6ed9c77ce266197_JaffaCakes118
Size

26KB
MD5

6b012615845c1236d6ed9c77ce266197
SHA1

9d59e38823cf4cc72ff73e74c04ca767b8205bfe
SHA256

6666cd4dbb1c25b49253499f7f0bd4379c1d6fd88848e6e93cf883f7d7f2dfb5
SHA512

59475a752fc20f81483c0d84ea2a8b0aee3c9f172b4e28f9695e26304a0e2f4a7bca05163bbc04bb9581010b7ca37f7d97ca6047bc9f3709d8c8ef5cdaf5aa88
SSDEEP

384:PjaSrrlF04vNtzBwHuVjRQ4aiDU2N6QdFYRLTuBlhbptIZ0AYvLAvSzRc0+W6+hv:raSMOzIiD99dORLTu9YxvSza0PX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b012615845c1236d6ed9c77ce266197_JaffaCakes118

Files

6b012615845c1236d6ed9c77ce266197_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE