faee683df65957384cf5ee3e20e93374_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faee683df65957384cf5ee3e20e93374_JaffaCakes118
Size

234KB
MD5

faee683df65957384cf5ee3e20e93374
SHA1

c39a3e050dfd056707749926dfa25f31a067bf76
SHA256

686f6343c5ca6097effc8340c2a488e5bb36723f6f9e63c9cd2c6a5239889fca
SHA512

ea7b54e765147c929d1c0539b1e8126db338b7670053f5c12a86ad631a985a4e13189ac330da91577bab6f42d67368d1aac5da6b4393adc87f94395692bdaa1d
SSDEEP

3072:6Irq1WVoJL5xXvHT0rFub95erNAsA4W2gEUUwHnYMCCZFjAbnDi5VeD7p8LfsNn1:fq1Xf/zJ5erOsIWu473

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faee683df65957384cf5ee3e20e93374_JaffaCakes118

Files

faee683df65957384cf5ee3e20e93374_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 691KB - Virtual size: 691KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ