fad805e794b41fc6600b9c83e6b7cf99_JaffaCakes118 | Triage

Sharing

General

Target

fad805e794b41fc6600b9c83e6b7cf99_JaffaCakes118
Size

907KB
MD5

fad805e794b41fc6600b9c83e6b7cf99
SHA1

a2097aaf900a228caae650d1894422d12b2dfa27
SHA256

97d8ac83e093cd2ca992fbc14d47642096565ee237877aa3855e6c013a416dc8
SHA512

31f33ce49f660ea760d4361c38102d1b87c32afea54812b3d65dfe6cb7f813cc689d5ed3a8c8f2211e3b4b5efb9b8edacc42312f6c6ebe581320a6a11e9b7334
SSDEEP

24576:T86u1vf7qtzDQlWb2l8cUIYJyAdFxNd/5MD6nejcRa/ZS1:Ap1Hup/b2hyJyAzd/5MD6nejcRgS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fad805e794b41fc6600b9c83e6b7cf99_JaffaCakes118

Files

fad805e794b41fc6600b9c83e6b7cf99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 720KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ