106cec608b59120f01aa8410f6986f67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

106cec608b59120f01aa8410f6986f67_JaffaCakes118
Size

278KB
MD5

106cec608b59120f01aa8410f6986f67
SHA1

cc082e089863f6001bfc89265758b4cb5db1df6f
SHA256

a9e268b3a26f9ef3e02ff83cc5118da7909624aa242ff68c95e516da8a473b06
SHA512

27234f250c4a99b33e300c5d2e3b4550c1a1ee259b7c457dd02f45fd67a33f782e1d9831d4d02b56d254a5fad04aef3e3c794e0842e5d4a87ba49b0919ae5657
SSDEEP

6144:aIwVTRPaKKaEMSF3h2BZ4l7HB1v7kpYgN5VQbl:aIcRiKJEMSF3kZ4BtQpBN5VQbl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
106cec608b59120f01aa8410f6986f67_JaffaCakes118

Files

106cec608b59120f01aa8410f6986f67_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ