6f78ab2eaa78a603565cc7ff132a4126_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f78ab2eaa78a603565cc7ff132a4126_JaffaCakes118
Size

310KB
MD5

6f78ab2eaa78a603565cc7ff132a4126
SHA1

f461468995289d5b9d3bb2ca4903bd70fb74ea54
SHA256

5c5b5eb3763d9e0cede41e78506d822995b4f629a13729d7a3a4876f8bcd08bb
SHA512

b2fae739aeea013dfa3664438d54df614ad19c1e69b2c56037483a085af6603dc350cce111623a1101e19711fb5814ecc514dc5f679067678d8f3d2d012828a7
SSDEEP

6144:C1cQsJkUsRYEmSTlyJdDTunOplKkdz3mLOveXavrAAjLrs7zc38d:C1czDseElCTyCKkdDmhqTjaK8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f78ab2eaa78a603565cc7ff132a4126_JaffaCakes118

Files

6f78ab2eaa78a603565cc7ff132a4126_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 908B - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rtss
Size: - Virtual size: 3.0MB

.rbss
Size: - Virtual size: 444KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 280KB - Virtual size: 284KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE