06bfc31e13013e235bb8d6e6125d051b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06bfc31e13013e235bb8d6e6125d051b_JaffaCakes118
Size

341KB
MD5

06bfc31e13013e235bb8d6e6125d051b
SHA1

0e03595a1fe361b3961d93d3bb2e388b3320dbc7
SHA256

4c25f0adb086dd0dab040480875cf9a2af7e28fb9b689d07a9ff663ba8783726
SHA512

c3ad978a5a3df5ad83c276c3692b0b33c9bb54e57446d938dc9063dc8eecfce667284ebbc670794fb6937f9486b009aa0bdca7dd821223f9283be7733831ac34
SSDEEP

6144:SNyWKIrVCx/DUtfXZguV470HDzEb4kbhxz7BlYmz:UvKGuDOZ/+70Pu4kbzztz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06bfc31e13013e235bb8d6e6125d051b_JaffaCakes118

Files

06bfc31e13013e235bb8d6e6125d051b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Tick\Time\Win\Timer.exe

Sections

.wrtrf
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fghgf
Size: 512B - Virtual size: 55B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.weew
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bfnhfg
Size: 512B - Virtual size: 66B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wewd
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vcbvf
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rtetr
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ