6f909572f9722f76497222810451d557_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f909572f9722f76497222810451d557_JaffaCakes118
Size

8.9MB
MD5

6f909572f9722f76497222810451d557
SHA1

f308f3cc5a3195995b76210bcc69ad17c1f5486f
SHA256

f55b010b96d2eac919a64c37c414afa95960bc3ecc8f4c7e08532e08dd29e933
SHA512

d9808bc0731467c33521fd005e0222ddcea619afb571e435747a6cb2610a145b63258e73d3b66bbf40a1e31dae57263417554a91d99032b05d34640596ee56d9
SSDEEP

98304:cjo5Pvl3oQ/tTGr5KnxWD4VtscID/UNNopraU41:cjo5PdX/tT4KnxWD4losYpmU4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f909572f9722f76497222810451d557_JaffaCakes118

Files

6f909572f9722f76497222810451d557_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.XPack0
Size: 940KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XPack
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE