fb39c797cb804e5fafddc027af8e287e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb39c797cb804e5fafddc027af8e287e_JaffaCakes118
Size

338KB
MD5

fb39c797cb804e5fafddc027af8e287e
SHA1

325ebfbbf98281368be16d160690c9e7c77b24d9
SHA256

35086127c76b2114b74b0471e7f2e28644eb520e712f7ce4ecfa3998a6625b29
SHA512

e93f5c6e4a8a0482004d247a48492c093bb25853ab89aef4704394745dec9072749006c1d18c0507ea45b9ef7f1380aaa8a3ade7f3438f9177fcb6244b05d8e7
SSDEEP

6144:647wohMqCOf1+F2gX975jUEeseUTUXdpZ6HAXnQf+F2gX975jUEeseUTUXdx:jwohVCI1+F2gX9JeseEUvZ6HAAf+F2gQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb39c797cb804e5fafddc027af8e287e_JaffaCakes118

Files

fb39c797cb804e5fafddc027af8e287e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 91KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ