fa266fc3dd69b8890c06b8a992d9f217_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa266fc3dd69b8890c06b8a992d9f217_JaffaCakes118
Size

866KB
MD5

fa266fc3dd69b8890c06b8a992d9f217
SHA1

d3f5f2ef8a75a46c85f3976138bb8ffcf5e28999
SHA256

bd08cb40eca39d27c125a8f8b491cfd64b9d4de2e4c4e6df8b6b788b4bdaecdd
SHA512

6366dbddfefca5eaca6de0dcf4ee15891cf522233c4b34a42fbafc739292ff431f9ba8cc7916f53a634a4d9da862903143090237e5fd3896097f860f6861cb5a
SSDEEP

24576:MmQGbvNvjkJPOh46b2SBOfV612Si4+32IxxUc50f:MmfF7Ch6b2SBOfV612Si4+mIxx750f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa266fc3dd69b8890c06b8a992d9f217_JaffaCakes118

Files

fa266fc3dd69b8890c06b8a992d9f217_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 587KB - Virtual size: 586KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ