fb062eb9f6f0523a8dca3bf85ea7477f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb062eb9f6f0523a8dca3bf85ea7477f_JaffaCakes118
Size

250KB
MD5

fb062eb9f6f0523a8dca3bf85ea7477f
SHA1

e2aaa71b6a34c28cb9f9b1889219711071478f9e
SHA256

650b94909d68b7e1620ddad7ddec8bcb82d2c6f66c657184ae56ef36478b41ec
SHA512

b6b3c865de5f01a9923e5334ca7529a5183be6123827851c6f196632c6a609b5660cd2535aeb2a38c52acb684323e9b1fcadc50d048c40382081ba6087d011ff
SSDEEP

3072:EcUXTWC5rLhI82BkMHv6gLXTd5AyA9LDZ9BPQpU0qsDkL2nIbDpbkvWFh61AJcY6:fUXTP8LygLXTd5PAcCHgiQuJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb062eb9f6f0523a8dca3bf85ea7477f_JaffaCakes118

Files

fb062eb9f6f0523a8dca3bf85ea7477f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ