faa67e7d03c76c4768dffe4e1f290172_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faa67e7d03c76c4768dffe4e1f290172_JaffaCakes118
Size

385KB
MD5

faa67e7d03c76c4768dffe4e1f290172
SHA1

628a1add0971bbdb53ffa1860dfd0f7e790d4aaf
SHA256

ac37292d50d9252d5c1f3e71fb2177373f12bd1ab999e66f1da95cf1ebb409b7
SHA512

71920136a1fe759433a4d6404dd5f4166dac8a58dfcecc3e5825df66fe02de0c33229b097d9f6f3dc1f8c7eda1b9fc69095d2de09cab16a7c19c8395dd30ad88
SSDEEP

6144:I4TRbGJOsJwue/Zfn3gtrqJcIKyrROQpo+E5KFT69Qv6l2OLwPDLTuPpPi8xysLB:9RbVd3F9JhZFTSQv0fLaDXuPpryAB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa67e7d03c76c4768dffe4e1f290172_JaffaCakes118

Files

faa67e7d03c76c4768dffe4e1f290172_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ