fa12396cef9baca560bd7bba6589cb1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa12396cef9baca560bd7bba6589cb1a_JaffaCakes118
Size

34KB
MD5

fa12396cef9baca560bd7bba6589cb1a
SHA1

62a4cdeea77f21fb5d70b37aa11c7e62999821b8
SHA256

eae702d4be04138494032397789800cbcde66891939b14e67ea232f8509b1701
SHA512

f75281265e88cfe34c879890aab972700e98c96930648f41cdc15e7b49c22b2677d134980d61926d908738a9063e21e9cd804443b92d182f9101580a23729517
SSDEEP

768:L7DwFbAP4cV3waNi+mskBmoniNrmVMrSJ+EhXsZ3MOfYj3ik:McRRihi9W+rZ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa12396cef9baca560bd7bba6589cb1a_JaffaCakes118

Files

fa12396cef9baca560bd7bba6589cb1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE