6f5a8a25fab47f8dd5e4ca817cec476a_JaffaCakes118 | Triage

Sharing

General

Target

6f5a8a25fab47f8dd5e4ca817cec476a_JaffaCakes118
Size

144KB
MD5

6f5a8a25fab47f8dd5e4ca817cec476a
SHA1

108662ff67f5eb891f862032892cddf3bc0bec07
SHA256

ea856be8eb37200adce04a29eb3843e9abae44f92bd4bf7079479fb4aa52b9c0
SHA512

5fce1fc158526741cd9f11bb16651ff6050940460029f5b96d398fa3941e787af0f0b6a908555ab0c72b3bd317258e9401c4e3eb2189a007f942a7ad98f551ec
SSDEEP

3072:W8xRH9Fa/PFiVY/YUkm+I48HZNu/aItgiKWdaNVyJqfjOI3Bbkp0d2seqpYWDFTE:NRdwrjesZwdn3oUh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f5a8a25fab47f8dd5e4ca817cec476a_JaffaCakes118

Files

6f5a8a25fab47f8dd5e4ca817cec476a_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

jSta
jStd

Sections

CODE
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.MaskPE
Size: 512B - Virtual size: 226B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ