fbe09d1d8e8025da437f08a4039ae4ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbe09d1d8e8025da437f08a4039ae4ad_JaffaCakes118
Size

385KB
MD5

fbe09d1d8e8025da437f08a4039ae4ad
SHA1

2b927970f1b44da54d86380109be5254f15fbdd6
SHA256

fc29977d49dc027bec17d97a71ef0b18275ab22e70278502a42d87a0ea738a74
SHA512

2bdb552f4073024cf97f2ac014e4d9765fef636e0b76387980ba83c7a94b072953779ee26e34f4f9f7746c02715d06acebace1e11d2cb3ff480169b56fa82d3a
SSDEEP

12288:CWtx4WzZ5v8zuOhgOK7Lttu1npV8PAIzC5B:CCz8zVhgOALt4npVij6B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbe09d1d8e8025da437f08a4039ae4ad_JaffaCakes118

Files

fbe09d1d8e8025da437f08a4039ae4ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ