fa06e5d6c8fed6f3da888038945d8f40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa06e5d6c8fed6f3da888038945d8f40_JaffaCakes118
Size

2KB
MD5

fa06e5d6c8fed6f3da888038945d8f40
SHA1

8704d59611f87ddb431388a914e1adc407126a49
SHA256

55762fcf8491d5c8c7617e613658f0084e183c1de73931d11b2bb634dc49649e
SHA512

da225c5f6f817a459279085332528a859e13ccfc19bcbfe22af0c140acb4a08d3a584b16a29e0571a58aa18cd1fcd430ea0db33c7e88e94e5445d618e14d4eb6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa06e5d6c8fed6f3da888038945d8f40_JaffaCakes118

Files

fa06e5d6c8fed6f3da888038945d8f40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ