f6c99d0124f8d045a98db1b8dfb9c124_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6c99d0124f8d045a98db1b8dfb9c124_JaffaCakes118
Size

254KB
MD5

f6c99d0124f8d045a98db1b8dfb9c124
SHA1

5ac81434a423a7c21dd3caa1db7a66d2f5c0cfe7
SHA256

8e93690bce823b8908a8e61f69c7ad9b60fce7dfea27b3829218ce5b6f598660
SHA512

4a6ef6736578fe292be38e5c66de4a9f0ab1e05b71a4ed5d52ad3c956d88d3ea60210a04196f8e2d1bc7b13cbb3ce6a902f7738c66414188b948b4d3ae23e729
SSDEEP

3072:eQi/Lz3I/303UegxGG28IB3Kw3JBFLu5jWgr2JnCidiITTkK4uH:hijz3IfyFR78I0w5BFCdPYnHPks

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6c99d0124f8d045a98db1b8dfb9c124_JaffaCakes118

Files

f6c99d0124f8d045a98db1b8dfb9c124_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ