fa817ebf2d67bdef0a4bc9a8d81f2482_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa817ebf2d67bdef0a4bc9a8d81f2482_JaffaCakes118
Size

32KB
MD5

fa817ebf2d67bdef0a4bc9a8d81f2482
SHA1

ad347231b257f14f1e0399b0d491883a87e65444
SHA256

493ca4a81141106e08a88ab4b25fe3206ae31f1f64cadd39f075ffa5378cf2db
SHA512

18c735b8b37184ff68afec224ec9c34806a3a2a9d0ca684cda74a61b187ebc44f6790716da2c8eede4977d6b1d98d7862cc55abaf4c318f77a0ddbdc017371af
SSDEEP

384:iNFU5BJeSY8zAh/0yp2kOcR/PrHa+7ZQZDcBthGhUXs2eOfd88dnSYBq7FxCLOXS:AYBJTY2ASnyzwDucLoy2SYBmFxTu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa817ebf2d67bdef0a4bc9a8d81f2482_JaffaCakes118

Files

fa817ebf2d67bdef0a4bc9a8d81f2482_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 753B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ