b6d64f8f8d532f2e1379dda3b5042f29_JaffaCakes118 | Triage

Sharing

General

Target

b6d64f8f8d532f2e1379dda3b5042f29_JaffaCakes118
Size

630KB
MD5

b6d64f8f8d532f2e1379dda3b5042f29
SHA1

3134d91dd95463abde4a3260c25cc8a8ad7eb5bc
SHA256

89ef34bbe47eefa99bf2b6d431eeae67c8903a367ba85d822df41b4f17ce9803
SHA512

213dc82ec91fadb4a0cd31dc7a0febcd5e8d36bde3ef43f51c58869cdf0dee1034b57ab1d0f86bd18d5d8121eb4a1b16837c529e9f58fd4c7c868a4d0421bd75
SSDEEP

12288:ON3d+nVp5Ll7Pn/mvCJCyvhMR4WtNC0Xwf/8IPoAI2F:kOVj53mvCCyJUtNC0X2NZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6d64f8f8d532f2e1379dda3b5042f29_JaffaCakes118

Files

b6d64f8f8d532f2e1379dda3b5042f29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 534KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ