fca0fb170732ec4d4c0439d0193dbb97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fca0fb170732ec4d4c0439d0193dbb97_JaffaCakes118
Size

2.0MB
MD5

fca0fb170732ec4d4c0439d0193dbb97
SHA1

bf5546130af45e3b8a1aa98c6e3c001720fc3c4f
SHA256

9d1fc42529d9126af05fe4876f38941be75bb2dee9ba95113a32b190f85b01ff
SHA512

06d8780d606bf698cde9dccc31c9979017f595aa0a63be2fba200834b42fb637e657c6f565bc97dcaf12a1b5008e1adf719d776ecc750e328da45e93f75b5fed
SSDEEP

49152:oMWlL65xypX55YcU1r73TNutxzlgFRB2d:oMWR65xOXY3133TNuPBgu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fca0fb170732ec4d4c0439d0193dbb97_JaffaCakes118

Files

fca0fb170732ec4d4c0439d0193dbb97_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ