fb3aca2d7f867c030f24d28cd5f04650_JaffaCakes118 | Triage

Sharing

General

Target

fb3aca2d7f867c030f24d28cd5f04650_JaffaCakes118
Size

385KB
MD5

fb3aca2d7f867c030f24d28cd5f04650
SHA1

c95cf30f8458a44906265080a2cb1f297023f552
SHA256

d1aad22bcb4f0b19ce90641658a3bd2f8060dcd3e572c2424d058dc1f1004c8e
SHA512

98c28b533ec6025e0be9ba6dd2eca72530591128a78ac4e5bc74ad8320163972e44719e077be7be0a223b9b774a97e13507d97996ae9c3338115a5645ac83303
SSDEEP

12288:lkrWGsBRgBh5CwQzvFe+UtbDnTcC5rYpccgAa2Kfvnf6Mi60B:NGyYhEd8+UtQXY0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb3aca2d7f867c030f24d28cd5f04650_JaffaCakes118

Files

fb3aca2d7f867c030f24d28cd5f04650_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ