fadb10a7efce863e2a9d775f86a55a03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fadb10a7efce863e2a9d775f86a55a03_JaffaCakes118
Size

2.8MB
MD5

fadb10a7efce863e2a9d775f86a55a03
SHA1

5a1daa56f3981eab52dad6803ff88e98c1599a69
SHA256

ec35c0468cb8a2a6e73bbd634ca3fcb2279fdc5523e7f21479583e5c84f2b85e
SHA512

64193aae9af6256c1fffbfeb1a48a840ae52102469ccf4b02f6e5234db3f93bc0e13e206a4ac2c3de7e905cf61403ca4a0f47f3c946398fef06ae287d31446cc
SSDEEP

49152:XbUIG9eGQMPvwZn51JySkqTcrzwnb43X1:XwIoHmPJfErzwnU3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fadb10a7efce863e2a9d775f86a55a03_JaffaCakes118

Files

fadb10a7efce863e2a9d775f86a55a03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 292KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 600KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ