d6f88e81b7610196770248500c4d8a5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6f88e81b7610196770248500c4d8a5a_JaffaCakes118
Size

752KB
MD5

d6f88e81b7610196770248500c4d8a5a
SHA1

e3e98528e9f76e55531332015c7febbfc598ecf8
SHA256

1cc07bdc4bef99b564d148fbe4f804aff1764014f76c3b229951fc419295a7c5
SHA512

17d5f24157b5c620e42e1d95d9c02b8d47af9510732e278504196d8c2492fa83c17d4cf64f2ac631200717ae52bf3f086b77055ab93e9a13fbc80bef914e09d3
SSDEEP

12288:5iRVA+7NQut3YYkAsCHWWAwNeqdYQpjik56W0ZBZo5jDnxJ2GKDQiNir0n+vBvOX:cRqCNQut3YDyGyekFjik56W0ZBZo5jD4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6f88e81b7610196770248500c4d8a5a_JaffaCakes118

Files

d6f88e81b7610196770248500c4d8a5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 529KB - Virtual size: 529KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ