fb609d5e1ff8f1a0d8e8eb3cc1030a56_JaffaCakes118 | Triage

Sharing

General

Target

fb609d5e1ff8f1a0d8e8eb3cc1030a56_JaffaCakes118
Size

1.2MB
MD5

fb609d5e1ff8f1a0d8e8eb3cc1030a56
SHA1

23e02004d8bd99bdc565f0dc0168a86b9a21338d
SHA256

ccf0830f4bf3a921b6b12000188314cff3b0ace67aa69d1b81c2c5ab18440fcc
SHA512

90c37766096bd34b1eb6e819d0ddbbcedc469873f7f0891c7c655f0a99d4511a3306576d9992a3c0d1d80601be2e705b88bfba5c4ebbe5e92ab6f4e887c77606
SSDEEP

24576:Uqw7h2N9skZPRFPp8pZcdPBC0Lb4MhaZq9yaQnP0vylYYz:Uof3Z3xxrCq40KcunP0SYY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb609d5e1ff8f1a0d8e8eb3cc1030a56_JaffaCakes118

Files

fb609d5e1ff8f1a0d8e8eb3cc1030a56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 887KB - Virtual size: 887KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ