f6dbd019cef55c3e10c90d8ff0278234_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6dbd019cef55c3e10c90d8ff0278234_JaffaCakes118
Size

513KB
MD5

f6dbd019cef55c3e10c90d8ff0278234
SHA1

086d6c66d05069552ea3f959636cc347186f7622
SHA256

507769345b0f8e6ddbaad0f77cac79defafc7a1d517799e1c0cde398eec08c5f
SHA512

247031c339fc02f87125cb251993961d613e681f76f2e58d117cdf777a4bcaa37c4b8fc3f6478987b3bb02fb0840d03f5a0c3b0d2ab5da7288d3a0f22b4cc872
SSDEEP

12288:ENKtDpBAYMZ3IvQRwNhmbjopfUYjGwSc4W9nI7Z7:7FUYM+3hCWfJjK3Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6dbd019cef55c3e10c90d8ff0278234_JaffaCakes118

Files

f6dbd019cef55c3e10c90d8ff0278234_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 431KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ