b6d56c16661bd9f35bf9217270cabfd7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6d56c16661bd9f35bf9217270cabfd7_JaffaCakes118
Size

651KB
MD5

b6d56c16661bd9f35bf9217270cabfd7
SHA1

368cdfb13d690be1a57d1e52eb41e1cd1603e581
SHA256

9e428d3b2c726bd381043b6d0453bbececb000861314ab711be9ad9932a28ef5
SHA512

380975fe4801e5d117cf0e46ec4d278ca7233259b80c151140b3c3c21ae8043607f9ee57b82161e0450af3d7e0594d1223633c478fa50505473b04782e428eae
SSDEEP

12288:Kg3jVcb4ElDzBLcGdSNx4p7G5i2pqVGeo1kUXdkWT8:K+hovBLcCA4lWpquOCkQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6d56c16661bd9f35bf9217270cabfd7_JaffaCakes118

Files

b6d56c16661bd9f35bf9217270cabfd7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 560KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ