a6fd2b4a3842d1958e6c94693115f4bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6fd2b4a3842d1958e6c94693115f4bc_JaffaCakes118
Size

112KB
MD5

a6fd2b4a3842d1958e6c94693115f4bc
SHA1

2561c9a19c62dc50672fa0199e895f3fcc088169
SHA256

40a3f2d67654177d074e200b86a53fe48cd15e81edb9b993aa92f3dac5d2fc05
SHA512

300822668cf7011f7e3f39a756642a560e38ee1cc728f3e3978a6233152eeaea3408e8a9c02fca477b67cc4df649f0b77e2e3d8329bc262f70dc7c31c7895ef9
SSDEEP

1536:PCGzIQgjl7TChZvuW12aAhsbUFX2PQvK7KdzBvlTx+5lucY/c0w2WwUfq4phBel7:rJgVQkfGHPwdllY32MHXBe0I0FIb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6fd2b4a3842d1958e6c94693115f4bc_JaffaCakes118

Files

a6fd2b4a3842d1958e6c94693115f4bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reroc
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ