6fc0a9d490dbfe737704dc0e214787b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fc0a9d490dbfe737704dc0e214787b8_JaffaCakes118
Size

1.3MB
MD5

6fc0a9d490dbfe737704dc0e214787b8
SHA1

a433704f70f07df86cd22af8e9fb96c231fc8d5e
SHA256

5ad9527705698bd8e3ac7de0bc4aa1ccd2407b6afbe004b13eae4f46e0cd606c
SHA512

dc2d28dbfd193940bc3c366a428e3c723cc433642b0fd70ce11334261940ef33b41560328f29af5deb6e5d04901a99b93fcfcf3d31e415acd7055dac54199f17
SSDEEP

24576:2jwKj0LVj/rMn7iDoYFAselwBOITeN4v6ltxdw5/9TGhqHlgWSCgyLHGyO2O+:tr/IeDoYFeKB7TmPtjQ/99HqyLk+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fc0a9d490dbfe737704dc0e214787b8_JaffaCakes118

Files

6fc0a9d490dbfe737704dc0e214787b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 1KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 595.0MB

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 32B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE