d6a6f9d71010fedc43fbb082efcb7f1c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6a6f9d71010fedc43fbb082efcb7f1c_JaffaCakes118
Size

885KB
MD5

d6a6f9d71010fedc43fbb082efcb7f1c
SHA1

75d9b63f823b6768263956a502e090701a5c1b84
SHA256

bc87244fdf42c0d7855c87740a451dd5d811174198d6a35342a1c6a02809c31b
SHA512

ef99b45a63dc63fd5e58e749b6cd9c8dcbd6b491f34a33d9412a6ccb44ea2325b217d8f7bdc2923400db7becf4c7fecad1fe61a93d1ebde2d74ea7496379035c
SSDEEP

12288:QSaKRjmVZE1dMmRZGs1cqaHqO3A+9pfBO8xa4D9o5XPzdWoyHfgzGP0ixn:2qyunZ1ZmpHxaJ/Uo2fs0BJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6a6f9d71010fedc43fbb082efcb7f1c_JaffaCakes118

Files

d6a6f9d71010fedc43fbb082efcb7f1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.-PEP-
Size: 12KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.TRIAL!
Size: 661KB - Virtual size: 664KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TRIAL!
Size: 163KB - Virtual size: 164KB

IMAGE_SCN_MEM_READ

.idata
Size: 879B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ