f6a9b0207b48f7aac606c8f580f05aff_JaffaCakes118 | Triage

Sharing

General

Target

f6a9b0207b48f7aac606c8f580f05aff_JaffaCakes118
Size

186KB
MD5

f6a9b0207b48f7aac606c8f580f05aff
SHA1

909b159044b91a83863e1fce7e58d9d0973d637e
SHA256

aba0a59e492b2310ff13890e81139f2f3f23781297e91ae3270bb472a09268e0
SHA512

6e5261bc4b00a1c43fc33c1524714b7ca963505bc59fe7f78c438c36ad0083c7d781f55f09d4c43dcd7f9b9b5f186f1196e8b5e9ab0c2e22fabaaa3a1162cb19
SSDEEP

3072:OhfJDNfsgypDl6SVwC5/CqrhKNCaL5x3Oxa6bLJAExjhA+9w9g2z97SXXV3UHJZx:gdsFDvZ5/zxa0lm157i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6a9b0207b48f7aac606c8f580f05aff_JaffaCakes118

Files

f6a9b0207b48f7aac606c8f580f05aff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ