fdb38e427de4e04708f5af60d291212d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdb38e427de4e04708f5af60d291212d_JaffaCakes118
Size

385KB
MD5

fdb38e427de4e04708f5af60d291212d
SHA1

5047f70f6c12a5356da8d1e373f59c7404b39396
SHA256

2380bc1d8c7d0c6df863cc24c4889ac16c7e415510db69898a135cfda887fc7a
SHA512

5a28a9b33245e6b8158b207fc4fbcb3c114129c0cf4a6a44505f7709604bdee42056abeb261d0a1d82e62a443b5c68a9668092e5ea0463223eee9df623aaee2a
SSDEEP

12288:igef29ChD/jb8Mv1u5/B7uHb5ashTq/S75B:fH9Chz/LcJ765/hTeSVB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdb38e427de4e04708f5af60d291212d_JaffaCakes118

Files

fdb38e427de4e04708f5af60d291212d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ