fa0c20dd5986da882b98fb28d02139a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa0c20dd5986da882b98fb28d02139a3_JaffaCakes118
Size

618KB
MD5

fa0c20dd5986da882b98fb28d02139a3
SHA1

3033332fb33d97107cbd7fbd7cd31879289d369a
SHA256

db731e1a1a5961e24b5e64373e1415f2c6caee38fa563a90e6a63a715e10e1ef
SHA512

51692fe367104a1d7ad3858612e68688d5430744b9414f1ad0bb6f2aaac91eb5fc4dd2729a6b092df54b3f9996e6e0c10febb29440444eaea37692578830640e
SSDEEP

12288:8ZBnYu/LJ223DkaYiBkErY5LrQy2g/dfl4g3A+D8WV:Ma4223DkaRPcHee95w+5V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa0c20dd5986da882b98fb28d02139a3_JaffaCakes118

Files

fa0c20dd5986da882b98fb28d02139a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 5KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 668.0MB

.abhvvg
Size: 600KB - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ