b6bd3246838ce2fd6d62cd07c501f638_JaffaCakes118 | Triage

Sharing

General

Target

b6bd3246838ce2fd6d62cd07c501f638_JaffaCakes118
Size

1.4MB
MD5

b6bd3246838ce2fd6d62cd07c501f638
SHA1

bf35be11fd20f6fa382223af5e309611c9f8cd62
SHA256

ac023791c6cc9681e9e932e9018d59a2234b177075d48a2139c671c17e3c00ee
SHA512

e8c6c783c36b2cc52161f1e5822359bd56c42024763066047ad9472a96999990d45babe6badad8fdb340ad7030e4f94b0927d662274d5bcda53cf42d80fae85f
SSDEEP

24576:IyIi+50q3823t7wdd4kgR6zPyxzDQTzcg3EQGibF56dCWx52teNots02fg:R+50PgRo/TBEinsCWWeNo+02Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6bd3246838ce2fd6d62cd07c501f638_JaffaCakes118

Files

b6bd3246838ce2fd6d62cd07c501f638_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ