fa1bf31a28cc7945ac72e7f65e156a31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa1bf31a28cc7945ac72e7f65e156a31_JaffaCakes118
Size

385KB
MD5

fa1bf31a28cc7945ac72e7f65e156a31
SHA1

e3c88f48780c27654687a25445b9ce89a21e8f69
SHA256

d4fb38540dbbdf1aa582183d9cbe1740b869bb961415fc7b7143ddcd345e829d
SHA512

af1d2ab319c817a4eacd437867fc0b8be4dff35ce30a6dfbc289ce506ed82d686fe6f516c401f24cba8343f7acf1f285fc91a02c09c6409952e6686360b02424
SSDEEP

6144:rrMixLjYA15idQYEMrombOgX/Our+mJJs0AL4756n/iQB:rAixjS75kgObmJJ8C6/1B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa1bf31a28cc7945ac72e7f65e156a31_JaffaCakes118

Files

fa1bf31a28cc7945ac72e7f65e156a31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ