6fdc82e8fd544e5f2f33398b8ec298f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fdc82e8fd544e5f2f33398b8ec298f2_JaffaCakes118
Size

2.5MB
MD5

6fdc82e8fd544e5f2f33398b8ec298f2
SHA1

6c6f634cc3b1440f9b1564193ea957d9e2fe9657
SHA256

ff83e0489f8afb99bc84b146620782789daad27f1e87c368bf067097bc9d0761
SHA512

82b1a849e01d6ae958081777911fc83cc646157fa5872b61759a923b6a3664e3107c6f7ac84dc199f69716ffe90904584eddec4490625eb3651d2539476b305f
SSDEEP

49152:B6dxyRTtqsQeM8WDyEP3E9pIAUzq4obUnm609j+DnUDIJ6PjNAgZPJ/CRpD+Y:kdwRTuV9DyEP3E9F9QmbGK46PWCQRN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fdc82e8fd544e5f2f33398b8ec298f2_JaffaCakes118

Files

6fdc82e8fd544e5f2f33398b8ec298f2_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ