b6f8ec6a923bb776af39e0b7ab26736e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6f8ec6a923bb776af39e0b7ab26736e_JaffaCakes118
Size

97KB
MD5

b6f8ec6a923bb776af39e0b7ab26736e
SHA1

a551f16358c7d706691e5372da8860a29b593819
SHA256

8bfa6dce8dc05ef40da8ca305a5b0a22e63096c7427235ed2e1934b9bb5161a9
SHA512

a65f704f3c3d03748abc80d8b3c15055a6c06075101133431224cdf81a44b88e286c1086952380b5873b6a59e0b9a2e179d1707c82c164bf3d8c1b3994502bf4
SSDEEP

3072:T3FtkCR0REKi5zbCmaQsF+XjxKnLcyGaoIKO:7Dkq0Hi1Cmp/tO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6f8ec6a923bb776af39e0b7ab26736e_JaffaCakes118

Files

b6f8ec6a923bb776af39e0b7ab26736e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ