faf9781baf3b92cb7268220f63783706_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faf9781baf3b92cb7268220f63783706_JaffaCakes118
Size

385KB
MD5

faf9781baf3b92cb7268220f63783706
SHA1

8f88dd18a684dc1d422987dafff6fcbbdb639075
SHA256

85961882e0a8437ff892020933bf5b5f92ada517e1112feda327e1f3707126bf
SHA512

e43025dd37a5586ab73d89bdc0c1004eb9c3b3d2014f06915fa3b02a0af5b06b4f717a288a8911c06517bad98ad6dea925a9ba4d1b92ecb4c21dfdaf1ec3a3a5
SSDEEP

12288:K+5tv8EWrZdvQP8vuFQOiE/tiaV8pffZZGIe9bB:KIqLrZJuFQOiE/Yf2Ie9bB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf9781baf3b92cb7268220f63783706_JaffaCakes118

Files

faf9781baf3b92cb7268220f63783706_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ