b6824a61040d003bed71a60281a8134a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6824a61040d003bed71a60281a8134a_JaffaCakes118
Size

97KB
MD5

b6824a61040d003bed71a60281a8134a
SHA1

02535d5e33485dd97ec6fd87858dd5b4b9a141db
SHA256

ae5ec6a4043766619c45a18361ea0d0d7aeb59f7cae8f5df88ad64e5616acd4f
SHA512

1a4ddaf8e3ce360b55eeb80bf5753604108bcef197369d134933e25a83468bbf47f9c93b0eebac6ec7866d2f18441c7d69409bcfa123df780cb469fd26175aa2
SSDEEP

768:s0LGpjli+mDCfsT1UBNGb1UhoElv/3w5BS3vQSlzfp1RkTyP3Ieph2dDQ+FNbMDD:s0LGpjhAFKNB9lH33VTp1RkWmE6Nb2QY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6824a61040d003bed71a60281a8134a_JaffaCakes118

Files

b6824a61040d003bed71a60281a8134a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

micr_oso
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ