fa4daf849af27f1b1b725eef2b18188d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa4daf849af27f1b1b725eef2b18188d_JaffaCakes118
Size

383KB
MD5

fa4daf849af27f1b1b725eef2b18188d
SHA1

f89cb8fc897d76f09ffdaa05b2df30bb2e438092
SHA256

dc8b5cd0e99e78161fd73381f499f2e6d89077aa3ef66b1b345007e1a12de96f
SHA512

4c3305c462140526cb53d2705a46aa99dab4cb913ba0a1844af5061028bdb8e4e55d9b4c31907c2738d09947650f3a2f335775688b55998b2119c7d513359843
SSDEEP

6144:KEEyDILGDSoOwh448cqEmMFaW9FhhdgLY0D3shpIBGcjUAMLqqPpqLeCy/45euHH:K/yZDXmMFthdOY9pIBGcjUPPpEx7guH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa4daf849af27f1b1b725eef2b18188d_JaffaCakes118

Files

fa4daf849af27f1b1b725eef2b18188d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.nsp0
Size: - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 375KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.MaskPE
Size: 512B - Virtual size: 388B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ