6fe89b849a3fe5fae955b72d77808ddc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fe89b849a3fe5fae955b72d77808ddc_JaffaCakes118
Size

17KB
MD5

6fe89b849a3fe5fae955b72d77808ddc
SHA1

0f7e891fdc829e35d2dcc781509a67a7663d2026
SHA256

6cb3e986a96a326a5320133f1bc2301cd60187d2b592bb834acbb8e90bb6b34b
SHA512

b876b92faa285838bf5801fdd3a94a3a2ffd7e92e4a275e0bb7dfb508b2eb14091437aa48016fb0deadac9b17c63c724ea7c7a54143f3ca1f3b5667a1c9582c6
SSDEEP

384:CY4BIPGYwZX4vp1k0PonuYcfKda8/9VMmF+ij9xgd4tkVM6l5cyv6nSe79/q:CXBocwp1kluY7dH9VnVxgatkV3Myv6nk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fe89b849a3fe5fae955b72d77808ddc_JaffaCakes118

Files

6fe89b849a3fe5fae955b72d77808ddc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eee9062b8cbe1efb89c250150605b1a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FatalExit

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ccp3p
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE