fad7611e3ae2a411edef520b02fec6b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fad7611e3ae2a411edef520b02fec6b4_JaffaCakes118
Size

105KB
MD5

fad7611e3ae2a411edef520b02fec6b4
SHA1

29bc61f58a6c33f3054442b57fa331da32011000
SHA256

5ebb11831160295d3a02b6dec05dd9bf578709065864e4c31fa66d784d1d02b8
SHA512

5b9e9de6977620f7aff4eeaf29c51e2cec4fbb16e78058556eb96ce0032c5994e3d50cea9babbdf0ad5345349f6a2c05f271583b406005a9d775058dd4d62bc5
SSDEEP

1536:tV7GQ897Bl2JBY9wCEb/v7HhMAbkJX52zutGyy1V/5GI2jNtQg3cJ3w01qFW/F3C:tAtfN6Ccv7HhoXcOGXVl2X1cJgrpW9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fad7611e3ae2a411edef520b02fec6b4_JaffaCakes118

Files

fad7611e3ae2a411edef520b02fec6b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 91KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ