d6a4a76c77e758bc546ec048cc1bb972_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6a4a76c77e758bc546ec048cc1bb972_JaffaCakes118
Size

215KB
MD5

d6a4a76c77e758bc546ec048cc1bb972
SHA1

c69ff76bab64cace2e8319a52953b33456722670
SHA256

01f6214de423ab7bd9e7c3640fb419119e230da26c6c968ae70ed16f8dabaa63
SHA512

d04533b611e7c683ebb1ad5a838f058b860e8d8fed2bae7ad55d97e4e9443c95a7621a703f157b6c403f4be98a165c5f2b1a4ecfd94f0e15eb6f9cc55a3902e5
SSDEEP

3072:cgMFAmBgZmkqbVRYs/9XaVPKTL9jEXcbKkWzyQlFBHevKp+3VUVZpqr4:c0ptqbTlFKyL9+gKxzBKlYh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6a4a76c77e758bc546ec048cc1bb972_JaffaCakes118

Files

d6a4a76c77e758bc546ec048cc1bb972_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 827B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.khe
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE