fa7eb499e4c48cd7fde53549b163c587_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa7eb499e4c48cd7fde53549b163c587_JaffaCakes118
Size

83KB
MD5

fa7eb499e4c48cd7fde53549b163c587
SHA1

aadd27d51f8048bc1d33bde7b2e091269d69a514
SHA256

70507bff89c979c5d9d76a0269681d7419aeba0ee76bdb173ab968e489d53f90
SHA512

3b6cb566d192d5b2249b5f04967be043433b4f1921972b68dcacb4f8d8fb2814fb5d63a379ecf3259e152cf83b9ad608e9965fe547abf77dd94e8b6ef10837a7
SSDEEP

1536:7WqjQlCaPm1sbc//////vOeLaO9Q58M15/8hDdA2bSCQMrke:lECu1bc//////mBO9Q58M154DdA2RQw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa7eb499e4c48cd7fde53549b163c587_JaffaCakes118

Files

fa7eb499e4c48cd7fde53549b163c587_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ