faece98082e47593e5383e96ddaf8d27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faece98082e47593e5383e96ddaf8d27_JaffaCakes118
Size

45KB
MD5

faece98082e47593e5383e96ddaf8d27
SHA1

45e788bb13f0fdcfa227eb5e6d640a19820ca2de
SHA256

61ff1265737779e43403b83562410017fa09783920f85abd226e6194fb43163b
SHA512

eae7acdab462b0de1737686eac2cc702f501c73d91c0b81859388819ef6ec6439082f886cc73ba53f3a33b7e97c3ded6f098d8dd94097c237a47fcd88144bca0
SSDEEP

768:QoCp1cUkqvp1BD60UVD4q1xkJ5EiwaIPhdUD5Ba2xqve0+Nwhs:VDMpvkD4q1xkJ5EjaIPwDja2xqve0+d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faece98082e47593e5383e96ddaf8d27_JaffaCakes118

Files

faece98082e47593e5383e96ddaf8d27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ