fb4d5042cae55a9e399f05b3a2bdaede_JaffaCakes118 | Triage

Sharing

General

Target

fb4d5042cae55a9e399f05b3a2bdaede_JaffaCakes118
Size

385KB
MD5

fb4d5042cae55a9e399f05b3a2bdaede
SHA1

3215379399a0b91244148e1b1682159e019260d3
SHA256

cb34d681a14e7ad664e0e2e83bbedc8a701d5e64be7b5a01f703ac54c89deeab
SHA512

3b1c44aab4167f17b4353254895c08cff0805fdf202601988db18dc3032d13aac318f9dccff5d349cad2a82b6973b83290c0861b0930784a3a5b946064a8634c
SSDEEP

6144:bl8ZI3k/N80nszYBz4Bazns+be9ke8jv+V7vJGYRcwfrACH/EEP3W6o73ewObHIB:bOB5o+be0WxwYWwTACH/EEvW5je1IB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb4d5042cae55a9e399f05b3a2bdaede_JaffaCakes118

Files

fb4d5042cae55a9e399f05b3a2bdaede_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ