b6b8d4322effc9f1f81332537d4e9123_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6b8d4322effc9f1f81332537d4e9123_JaffaCakes118
Size

1.0MB
MD5

b6b8d4322effc9f1f81332537d4e9123
SHA1

34d181f9c728da3c082fdc7fcea860fcbdefbd84
SHA256

27ae24fc2acf1647a5e11bf4f8b5ebddeb486b4ef8e6a18576a068f32471b6f4
SHA512

541924beeb06f7ca5467a9f29c3f692a7a2566056b5cb9d35a3d8aecf9f557b19d205e10d7c5f3bcdcf931492e4f33678284bfdd56659be4514ff2e00775f0d7
SSDEEP

12288:J3OUoLE11S7RIEcUt35FHTF/l7fEBg6bF15zWdgpvC2IXtUo/aIP:lOUop7Vxb52B/B15zvgfrZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6b8d4322effc9f1f81332537d4e9123_JaffaCakes118

Files

b6b8d4322effc9f1f81332537d4e9123_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

infocard.pdb

Sections

.text
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 516KB - Virtual size: 513KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE