fa489fb29aeda0387a9fad32783f906a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa489fb29aeda0387a9fad32783f906a_JaffaCakes118
Size

506KB
MD5

fa489fb29aeda0387a9fad32783f906a
SHA1

94f83673459534fffd03053ce26a2a6772c813d7
SHA256

957a3260c4bce03da86488055cbd3fbdc0ac236ff9904724171abce1b1c62f75
SHA512

ee47f31388f86bd7d5e726e9881e356122865981e2aa0839b4f271aac12dee8e213122aed7d83c8f068edd571feeda2435cf61dacb50f5362d58131eea80e08f
SSDEEP

12288:ybdUz2xN074l55W0WNQRnYyctGVAeEtMiL49GLrJ7Z:Zqx+hxNQnYAEtMiL49OrJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa489fb29aeda0387a9fad32783f906a_JaffaCakes118

Files

fa489fb29aeda0387a9fad32783f906a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ