fa5aa01e8307dc36990cd5ffc30899e6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa5aa01e8307dc36990cd5ffc30899e6_JaffaCakes118
Size

82KB
MD5

fa5aa01e8307dc36990cd5ffc30899e6
SHA1

4a6df5d303bf2d70ff1553b6af2dfa07b3047aab
SHA256

2468119b355d4a6d31af44d251b3e928b07dddac539abc62240bf7de40514491
SHA512

c46336f88f36af9c92c06fade7b1c73c1724b3e269f2d4a7b82b324a3ee18cb333ff775788a0b1820c9ab3ff8b6749b9397590403f14badb9ae81ae8a2489cdb
SSDEEP

1536:xm19jrP7657rt8tfYG1w4sZ7yn9sG/RkWNORlO0XU+yOcX:EjrDamtdZsWCWNOr5UUg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa5aa01e8307dc36990cd5ffc30899e6_JaffaCakes118

Files

fa5aa01e8307dc36990cd5ffc30899e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 90KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ