fb3ff20be7788e02f35bee332499f3bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb3ff20be7788e02f35bee332499f3bf_JaffaCakes118
Size

10.8MB
MD5

fb3ff20be7788e02f35bee332499f3bf
SHA1

631bbce13fb7a4055819f7a85eb4d19409a07a28
SHA256

46fad0bcff266ed2a558c75d66d5f329a5de32aaf135532bc8bc7a9f53593d7c
SHA512

1c79df350643aa44f88ab340696a306a06d73e89257fd75e591aac9a60795b84f34238e5e8c10c6b41031a519433db4d9d7bee33a12b4b861c85f403a108c488
SSDEEP

98304:TVxfUgNq7IVG6O1jzSNKK1QYUW1+8z6C4WUyZMV4pTG7o2:TDqINKK1QYUW1+8z6C4WoVCko

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb3ff20be7788e02f35bee332499f3bf_JaffaCakes118

Files

fb3ff20be7788e02f35bee332499f3bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1017KB - Virtual size: 1016KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9.7MB - Virtual size: 9.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ