6f1b006204e4c1ed7f7484b3657d4139_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f1b006204e4c1ed7f7484b3657d4139_JaffaCakes118
Size

819KB
MD5

6f1b006204e4c1ed7f7484b3657d4139
SHA1

6c98bd8404ce9f7bc74ae60b05accbadf61f790a
SHA256

d4e24527227cc1558af45a1d132942ba8bf9e0d09194f97cecd3f844fe994488
SHA512

b10522fc9cb2cdd365e01c88889e689f1bd6ac8779751a4bbffb2ef42fdfebfec202efead19bc28bcb0429195373cd32ea142a1480ffeaa559bc67d65fa06870
SSDEEP

12288:NQrPlc549L9Ton0A6MiqwNdXpHu6LRc++1rYeAADxRQ7KfWW:sdcw9TW0A6iwbYBh86Dx1WW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f1b006204e4c1ed7f7484b3657d4139_JaffaCakes118

Files

6f1b006204e4c1ed7f7484b3657d4139_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 623KB - Virtual size: 623KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ