fa9a63eae3f1144de75f3b57640c76a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa9a63eae3f1144de75f3b57640c76a1_JaffaCakes118
Size

385KB
MD5

fa9a63eae3f1144de75f3b57640c76a1
SHA1

9bc99b7d1a0e9f97f923181d8a2bc50361e91988
SHA256

f6f31ce4abf5fd16276f25c8859a72cb07dd2b9a87ae5378cfad1254d54fb8f2
SHA512

aade25fb5d566b8bbbb4ed4fb8abf224f835adea7931dbb93eb7b806f5f06a80b79668e65b2bf7f31571d78bda268e9a873969170b48c913780d87c6bc03d82c
SSDEEP

12288:F/oEUFQwlwj/DMhqQMK2t2habvNSytuaPPEB:F//MhqFOpycaPPEB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa9a63eae3f1144de75f3b57640c76a1_JaffaCakes118

Files

fa9a63eae3f1144de75f3b57640c76a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ