b6bed44256b4b764febed62a632f4fad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6bed44256b4b764febed62a632f4fad_JaffaCakes118
Size

665KB
MD5

b6bed44256b4b764febed62a632f4fad
SHA1

e3b3428443d779d26529478a6813d1f47b05126b
SHA256

ceb08f00c4b64c33c44c2c98fc54568003cbbb703e95e1301e9f2fb6f96d8b2a
SHA512

595c14516b2b715ad88f78b3350edde6f889bf2bdf18b8e31a7378d5a8360d64e354f39c9a35569ecbf7ccc0ea5263458baff1903a17fdc7428f7105e3e069df
SSDEEP

12288:1upK4UqUbxyyCyyyV0NK1+2oedimqtnwm6fjbL2rc3nhmiYrK5SQI9XXhk4:opK4UqUNyyCyyy8Kwbe8mq9wmGjn/3Ba

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6bed44256b4b764febed62a632f4fad_JaffaCakes118

Files

b6bed44256b4b764febed62a632f4fad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ