fb0986099e6da3f8a7f614826dec49a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb0986099e6da3f8a7f614826dec49a3_JaffaCakes118
Size

16KB
MD5

fb0986099e6da3f8a7f614826dec49a3
SHA1

742d54d3e6e527b407a224c4254275614413166f
SHA256

bd2bdefb7cb2eb5bbe625e76fe5c3c8494058bc3dd9c222eb04f85a13cac189b
SHA512

19b3a3d6781f80a42789cafa5ae2e247731f28fe7548b72fd4b3471d312b1f7e25b613bf2784f2d4ef9c45e7d0e4c2a2d2fa30d5b929b8f46d750ebcb97a7e7d
SSDEEP

384:ucY3eUY3n1+ChFn8q37XheAc4e8FU0miW5/Z6Ja8X5B:ucYvYH7Ry4v/ux688pB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb0986099e6da3f8a7f614826dec49a3_JaffaCakes118

Files

fb0986099e6da3f8a7f614826dec49a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 597B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ