fa765731be430069365ac472c4cb7666_JaffaCakes118 | Triage

Sharing

General

Target

fa765731be430069365ac472c4cb7666_JaffaCakes118
Size

907KB
MD5

fa765731be430069365ac472c4cb7666
SHA1

02f12073f2a3a5075e9d5d9246400cd4b2540747
SHA256

49fd5528a34afb4d27f8d32d6ff1b3e57f27c3ce76bba3ecdcab1a63c0b6e884
SHA512

a0e2117919c0b1efc36558341ae252453cd8dce82435fa47ee311aed25445e585521c6773d2dcb400225ba223641d3894b86b85b3a619a77b226f4e3c2d8443a
SSDEEP

12288:4ECKEuddgbWjMa4tCv/4GGfR8zGe6rHVk3r2GX1aAfbni2oMYR9FjVDa/ZS1:4igbm0tCvOR8h6pk7HX0An2ZD7a/ZS1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa765731be430069365ac472c4cb7666_JaffaCakes118

Files

fa765731be430069365ac472c4cb7666_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ