fa1f4d8d5928a6435435fce7453d9aaa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa1f4d8d5928a6435435fce7453d9aaa_JaffaCakes118
Size

1001KB
MD5

fa1f4d8d5928a6435435fce7453d9aaa
SHA1

a6c6f52394f3d87db14a63b234c78211f436123a
SHA256

32f6ec5b5b7c806a093ab23b59252930e7a629489857dfe3659de7eec4ab01ea
SHA512

3e873a7bdf37f8a36ffcc43b79d54c328943b660ebddcb2bbb444fc8e62c6ddb3ea4a45613f99c4402bc750603a3b488ad203c94ea84dfb151ae56b08845436c
SSDEEP

12288:Up+vmyY9beSkj77NADGFvGq+EOvLkOUvIVPJvC+0yRK2urqoXkWsdr64lprmi:UMO3g13Wih+kOzPJp/FoVKrRpm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa1f4d8d5928a6435435fce7453d9aaa_JaffaCakes118

Files

fa1f4d8d5928a6435435fce7453d9aaa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 645KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 187KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ