6ef4099f25bf79cf64ccddcd26db84f0_JaffaCakes118 | Triage

Sharing

General

Target

6ef4099f25bf79cf64ccddcd26db84f0_JaffaCakes118
Size

356KB
MD5

6ef4099f25bf79cf64ccddcd26db84f0
SHA1

a48e5120f9b87f3d95af9cdf3528f1068306e336
SHA256

456a69d9a8ed2729373fa2552bf520994495ffdb0877d18e1f72df990407649a
SHA512

4811786624c1c9bb4c9418f67173417af868eaef4648490873ee9d895fddc4c30d98ec3439f505bc727866564fbeb497304703b39fb104fd44df4885c82601fe
SSDEEP

6144:VDQ30AqYGIchnM0DDVXUug1+gQcoQtcX8VUI72TDZKIyR59+HsWsP/KEB:Vk30Z/IcBM0nV81/QcoQtcX8VUI72TFF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ef4099f25bf79cf64ccddcd26db84f0_JaffaCakes118

Files

6ef4099f25bf79cf64ccddcd26db84f0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 272KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 4KB - Virtual size: 487B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ