a6e4b38eae9b452429d0ee0d06dc4a03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6e4b38eae9b452429d0ee0d06dc4a03_JaffaCakes118
Size

284KB
MD5

a6e4b38eae9b452429d0ee0d06dc4a03
SHA1

cb614ad81da42d2ea2ac32ade46b1b73a3d2947b
SHA256

0e72884097a2fb9fd91c8dda8b2bd4b3738341707dcc7337defc02925b82c691
SHA512

fc5c4eb18558a9850eb688c9acd91bf52ec34a70efc59175ac74e036135378390897d4fcfdd4e51ae6bc1e50de1872528248e8c939ef9afffd984b03d14b9737
SSDEEP

6144:nj67CZH4FAv3R/J+MfTcK6UQBLXPgmFD/gtjMbvn:nj84YFQ/IeTLHQBLfgmFgVMb/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6e4b38eae9b452429d0ee0d06dc4a03_JaffaCakes118

Files

a6e4b38eae9b452429d0ee0d06dc4a03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ