fbaa806e0fda12c851d36219be41a5f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbaa806e0fda12c851d36219be41a5f9_JaffaCakes118
Size

224KB
MD5

fbaa806e0fda12c851d36219be41a5f9
SHA1

39ec28dda1cff4c25016e4149ed26ba4dc55238a
SHA256

5028f008876974266596ebc3e989a65b0a759bb8921faba8493a44964f5c8704
SHA512

5eb088170809310cff8954f6693697783c3cd9b42a2fcebe477e5f8a0c4a841178c591a1c2bbe6f15b7320dcc4139ce478c474be8489fa8bdeb459b1610ebe2e
SSDEEP

6144:pZyFX7k464SVWr0FnS6E30JtZnGfyAGRt:47k464SA1n0Jtccb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbaa806e0fda12c851d36219be41a5f9_JaffaCakes118

Files

fbaa806e0fda12c851d36219be41a5f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 188KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yC
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE