56d6be70fe307803e3b6612d23c29c7f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56d6be70fe307803e3b6612d23c29c7f_JaffaCakes118
Size

286KB
MD5

56d6be70fe307803e3b6612d23c29c7f
SHA1

3c6ec932711c03910f3b1f0d8c5f1c35c0c1ebb1
SHA256

a78a7b98e959f394a108c38678f994e04fcacceb6a19d08b60b17bb1dcba18f6
SHA512

c615805b6c2a89c492fc9029fce54dcb65514fed7638a860a34a1fa685e3a9caae979b11bfd4255e0963cda3c1044fca6e3169656c8005f425a2d981f50f5c8f
SSDEEP

6144:6SG7YzUUgyAEZ+WJT30W8DE5yDlDD28hvlCUu4TBB:g7YzULyAEZxz0TrlDS8hv8f4TBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56d6be70fe307803e3b6612d23c29c7f_JaffaCakes118

Files

56d6be70fe307803e3b6612d23c29c7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 768KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 829KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ