6f443bd4a9a3d8ed68963104eb7e0d7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f443bd4a9a3d8ed68963104eb7e0d7a_JaffaCakes118
Size

95KB
MD5

6f443bd4a9a3d8ed68963104eb7e0d7a
SHA1

04e841341cbf2e4ed8ff39c29ef4b5ddbdaeebe4
SHA256

f1d73baae2e011a730aa2ea6f4d4f8ec4bc8887e595485bc244c11bafa61bf0d
SHA512

635365dbd018ebcc2d958668adedc50df4b7109a8055a4222a62d8d15fa0406be1ff0561ee6d36ab9e38ceee56ff3e8cffc79602fd4feb2b31acc2cb153a4c63
SSDEEP

1536:lT3KuCzqahhTbcG0yZnFi0Seu9+2aLWdaAQzqj3D7QpHoSp7wpvFIy:gc0S/9wCdaxzqj3DEeSCpvFIy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f443bd4a9a3d8ed68963104eb7e0d7a_JaffaCakes118

Files

6f443bd4a9a3d8ed68963104eb7e0d7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ