f06562bef29fb8ef3085b2eccd8e3837_JaffaCakes118 | Triage

Sharing

General

Target

f06562bef29fb8ef3085b2eccd8e3837_JaffaCakes118
Size

37KB
MD5

f06562bef29fb8ef3085b2eccd8e3837
SHA1

6c6428264718b9a791c28b4924683533316780db
SHA256

b13c565efb815850c2e5c250e394d98545ee54b9648ed58c2dd9323cad04446b
SHA512

9147b94ddb8c31a3b03a1f2c30a12f3e665cb58cf359b3fc0622dbe68e6b551628ff376f3d650ecb2cac51e7232c77f9eb64ddadf8bc336f79643b5b0a66ae01
SSDEEP

768:Z4tNnbw5HTMgqIx/bVyLBwkCEeHUYBmux55Y6:Z4tNbw5zWINbVyLBKQomux55Y6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f06562bef29fb8ef3085b2eccd8e3837_JaffaCakes118

Files

f06562bef29fb8ef3085b2eccd8e3837_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 809B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ