a6d3baf94274a31d2f8a8e09e29ccd9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6d3baf94274a31d2f8a8e09e29ccd9b_JaffaCakes118
Size

768KB
MD5

a6d3baf94274a31d2f8a8e09e29ccd9b
SHA1

9b2c00a3dafd6f46cfff84c7c3192bc7c37a001b
SHA256

9fa4c7b924355a6905afefe01f51f130bc3271fdc4b9e2e4d304fef8542150b8
SHA512

97c001e228f2e510bdc6c9e71209e1b15c39389041846335d275f1cbd60eb61d6a7745b40cde3e544a0754cbd77f3fc763dbd63bda090c5c75462e9b090fc9a0
SSDEEP

12288:N6E1stpk/1gKxpuAtt4kDzKgKtCWxgnQKyjoYP/Ousxi4jIjnqt2pJOCmH:N6Eep2nFnwgnQKy0YP/OVELqEJOCO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6d3baf94274a31d2f8a8e09e29ccd9b_JaffaCakes118

Files

a6d3baf94274a31d2f8a8e09e29ccd9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 661KB - Virtual size: 661KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE