f6f8aef613f99f79fc50c88f3abe8f80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6f8aef613f99f79fc50c88f3abe8f80_JaffaCakes118
Size

53KB
MD5

f6f8aef613f99f79fc50c88f3abe8f80
SHA1

41b4d89ecfb1b536099ecc720263ea04ceb26022
SHA256

d0db5799533eb15015b9474baad7fadcd677d4126fa07d067a475e14d521c3b0
SHA512

2171292c778631f5043d6660ef0a346cf6109671b2c00ef34f17c004bd87984c9551a797f4410dc82a25dab5336d31ef4b6bce5925b7dbb1e2d77db8809207aa
SSDEEP

768:PxoXfSFVr3t+aUcZPLUiCvGjxQN4/eaNecRa6UYAxxPqWAvN:PxyfIr3t+aUcZj5CviQN4WhcPFAxdiN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6f8aef613f99f79fc50c88f3abe8f80_JaffaCakes118

Files

f6f8aef613f99f79fc50c88f3abe8f80_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 339KB - Virtual size: 338KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ