faa43c2ed08d986ce5b04516762a37df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faa43c2ed08d986ce5b04516762a37df_JaffaCakes118
Size

385KB
MD5

faa43c2ed08d986ce5b04516762a37df
SHA1

08a5e60cdd65364562b0986906ae7965cc1eb870
SHA256

bd422297f5809434dc32ad7109b300109b164ce5956ec27b1ce4822d27788c26
SHA512

a63f2afdb0b9a724cf0a7b1da9d6427e3cd7e01aaa9fb86f39681e6840dce63aecb173925794a75d185d9f261d32a27ec8524c5c9475529bbef2ef3cc1d81485
SSDEEP

6144:H+H/ajBPsC9ZC3wF1ptseoILsfL2hm/tKT/9hZtYKB:eH/6BU4C3wF1pJoIgz2hTAKB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa43c2ed08d986ce5b04516762a37df_JaffaCakes118

Files

faa43c2ed08d986ce5b04516762a37df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ