add6e784c4244d91b69bc8ac459c1f60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

add6e784c4244d91b69bc8ac459c1f60_JaffaCakes118
Size

4.7MB
MD5

add6e784c4244d91b69bc8ac459c1f60
SHA1

a011c63cb4b16940e544bbfbbf00d3eefa89179d
SHA256

962e1434d759882f3aa814825b6231f0916acbf6ea25d09ceff472e335a95389
SHA512

da3a43e9bfc27669b0cc2d658349ed2a51ab1fd0a4de6c972c1a0662c5df78b187bfaa50c42e085ed8e25579571e104bc07924bb452112fe9a0477b3cd6897ce
SSDEEP

98304:Tv2I01VYOnDwNfRKG8aGBYgHlYRzr+1DPVAxmalfD:g1V38fRLmY/r+1DPVAxHfD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
add6e784c4244d91b69bc8ac459c1f60_JaffaCakes118

Files

add6e784c4244d91b69bc8ac459c1f60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ