6f6674e9a3a81dbb25e676b3b52502ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f6674e9a3a81dbb25e676b3b52502ef_JaffaCakes118
Size

281KB
MD5

6f6674e9a3a81dbb25e676b3b52502ef
SHA1

c609022d0c59bdf7321eb6ad6cb5edb52935471d
SHA256

b460f8e9c9526e2d5df34ac110dc2a024004d942d637f2161463c1de18d8c7d8
SHA512

fe30b5922a2c984edcb8508e3331391e805f700044ce1b3d26f2dba8bd2421d56de1afc3b2199bd86fb87a225444e232f3cb35eeee32905008d31876b0a97dbb
SSDEEP

6144:pXJNdUOzF3kd2RId87EFDZ9R6tMUhd8UqH:pZNdP0XnDZ9R8MUhqUs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f6674e9a3a81dbb25e676b3b52502ef_JaffaCakes118

Files

6f6674e9a3a81dbb25e676b3b52502ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\projects\U3cleanup\cleanup\Release\cleanup.pdb

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wtq
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE