fb5d5b6003cef167801b075c4d59cb56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb5d5b6003cef167801b075c4d59cb56_JaffaCakes118
Size

385KB
MD5

fb5d5b6003cef167801b075c4d59cb56
SHA1

bfe806c498f8ac96825411020fa5386a39050ab2
SHA256

7a697f1a4493c8db1991b6291f7ec4b17779f83b8e11a1d403dc5e8d9f393d77
SHA512

584f32ad00db30819d6ed29c2befcc8c51a3260bd1d43619c2e4ab7a7b7a02db844abd4069b676f8fed0abfc4215a1b474dd653ea6d6599530fdd3d545668598
SSDEEP

12288:pYFrYpbnm1z6OfoWV6ni9arh8o66rIcB5AIavdm1GLuB:5pCOO76t8oTz5BTGLuB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb5d5b6003cef167801b075c4d59cb56_JaffaCakes118

Files

fb5d5b6003cef167801b075c4d59cb56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ