fad21ce83a91f3a49a307f2c8edaa560_JaffaCakes118 | Triage

Sharing

General

Target

fad21ce83a91f3a49a307f2c8edaa560_JaffaCakes118
Size

35KB
MD5

fad21ce83a91f3a49a307f2c8edaa560
SHA1

2ec95159fc99bc736ccc2540018f4ef144a75719
SHA256

2fa762dfefeffa9e43c294d859e719531418fdfe26b2a8ad9066d9b2f519c45e
SHA512

c0fd248f6d21ce3c6c563934a400c395e5508f9b12d4c632a568cddc34ee14f5ed3cb6ca23c41d1600215d964157911275731ecbf3859ca95a9a4d9edc012b31
SSDEEP

768:HdCEqpsswQ0lJ8bfbh0PjPLXT/7HDvvcR3gnZdQy6rseqsexhQrNjgMj95yu:HMEq3wQk4rs3Twd5j95yu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fad21ce83a91f3a49a307f2c8edaa560_JaffaCakes118

Files

fad21ce83a91f3a49a307f2c8edaa560_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ