faf4e314ee8313676c6e73b7494b643e_JaffaCakes118 | Triage

Sharing

General

Target

faf4e314ee8313676c6e73b7494b643e_JaffaCakes118
Size

60KB
MD5

faf4e314ee8313676c6e73b7494b643e
SHA1

afb6cc0258a315e4bcb0070f79081cd86bafd765
SHA256

4e284abe9e067f3f3ea2addc989cd3e879860ee523656d52a84db0fcead9643a
SHA512

3e1ed75567287c31b2e48a3d464b7418e80b5cc9c14e52121b00e7224410a1a15f86eca04d8fc04b524855b447fac8ddb1ec2dbc357e7488b30a0416c6d204d9
SSDEEP

384:kqF2wVZ0n6B0HRg7ip5yr55lqF2wVZ0n6B0HRg7ip5yr55/mVGCW9ikPs:kqJRqJLYYdk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf4e314ee8313676c6e73b7494b643e_JaffaCakes118

Files

faf4e314ee8313676c6e73b7494b643e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ