fb8bac3fe3f4b0286dc6f5c442675933_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb8bac3fe3f4b0286dc6f5c442675933_JaffaCakes118
Size

794KB
MD5

fb8bac3fe3f4b0286dc6f5c442675933
SHA1

229657b50d9cb3a52e8c4257c77eee117bccb3c9
SHA256

88d3c8d29fa039af17ab2abf2a81ccb4a557b7fb611bcee28eed6c6c6ddb8528
SHA512

8609ef56ec0bfae5546de99d6bd955513dc556fee7503aebd515de1b536fb40b661ad1f7081d573a5b5137bf994f3a3017262b6d3e2031d1ca0ecc97840cadb5
SSDEEP

12288:7M/TtUYUexX7TioF2Yb4wzEPPR48BNt8uPYRHe/uSL1Cbb:7MLeexrDXMcEPPW6Nt7PiHe/9LO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8bac3fe3f4b0286dc6f5c442675933_JaffaCakes118

Files

fb8bac3fe3f4b0286dc6f5c442675933_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

code
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bss
Size: - Virtual size: 1.0MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rDATA
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ