b6cc8334515900af764a305137feffd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6cc8334515900af764a305137feffd8_JaffaCakes118
Size

768KB
MD5

b6cc8334515900af764a305137feffd8
SHA1

6f92b62e8129b67c0a349c84cb3bdff74b05aa38
SHA256

d7ea869377b6c083f0ea2b7c97635aa7311d52d425a29ffc3f34db91ab68bf71
SHA512

1c1907ef34865726ad0d79b81767c88710c7ba348ada8107e6cf5bb5269f9723cbbcbef2599fe3b3081d217d86380171670ad486d2128092bcb7fab422aab7c3
SSDEEP

12288:18kOUf9ZUhsVLN1EOutg4XbU7meciXJ701USaQwBirzeF58Lm3p:HB7UhstNLi1lelu1N+BomWYp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6cc8334515900af764a305137feffd8_JaffaCakes118

Files

b6cc8334515900af764a305137feffd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 307KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 425KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ