fadab4ba92a30773497e19bd07e68023_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fadab4ba92a30773497e19bd07e68023_JaffaCakes118
Size

385KB
MD5

fadab4ba92a30773497e19bd07e68023
SHA1

23eca3ad4a0fc571f0dbc6b67f24140bb61bcdcd
SHA256

b842a85feda2a58cf97768cc083192ca712624e182466e125f70511cd89c15a3
SHA512

cb122f7d83f09be826dc4504f69bd172d4c28646c46d5c704b103ac7da3e21f7e3c5301c239319f8cf3eb4f6e93de2b5ea6d9f2fb75b7eea391241e086a4c50e
SSDEEP

12288:FkiV8edy5622xAAARSh/iks2NHNQ0vzE2VNwz0lxPB:FR06208EHsWNY2VN3tB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fadab4ba92a30773497e19bd07e68023_JaffaCakes118

Files

fadab4ba92a30773497e19bd07e68023_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ