f6c682cac7d364dc94321f8058db26bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6c682cac7d364dc94321f8058db26bb_JaffaCakes118
Size

139KB
MD5

f6c682cac7d364dc94321f8058db26bb
SHA1

7f21dc8d00a394f7cead981026ed578dadd6f841
SHA256

34e034e8a2cff7b53bc6fdbe1b97c17662dd8fbb95f6b6d08b1079e9631c573e
SHA512

96728b19a56a17e7370499f2fb064a0677424bc76daa8f7fb90fc3b779ee3ef35df68efea5b64142b5dfe7c579f7be17257d95399a75b54a04f6002ee971cf60
SSDEEP

3072:nognFAyqC6YtywwxCOnOOD4yW+0ozWnVCJ8F0ra2z0uHx4wu:njFAyq8hNyhz2IJ6Y0uH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6c682cac7d364dc94321f8058db26bb_JaffaCakes118

Files

f6c682cac7d364dc94321f8058db26bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ