fb3968c707eefd49b681ae0c08f0a36d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb3968c707eefd49b681ae0c08f0a36d_JaffaCakes118
Size

74KB
MD5

fb3968c707eefd49b681ae0c08f0a36d
SHA1

41caf492b036638915a189d168307eb87c0079e6
SHA256

5b81ea3e4e35a0df36cf0198b67c1243063a7c4171aff31ba6c6d626a8a7bae6
SHA512

9e5a1defbd38d6594a83df88db4e0c0c59b068b3b6656989525489c232f7d70a028379aec69a16f55c668d3a581d26571846f350b005e5a102efe9dbd7aae32d
SSDEEP

384:QO4+1/qBvE6d6wb4k2071HjAoPXK/IX11g74aYQVXuaH3ARprB1:Qk1/qtE6d7bO0pH/7l1g7ZYmrH3q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb3968c707eefd49b681ae0c08f0a36d_JaffaCakes118

Files

fb3968c707eefd49b681ae0c08f0a36d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ