fc89b4ba7a2a1d2a0ea676d0586115d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc89b4ba7a2a1d2a0ea676d0586115d4_JaffaCakes118
Size

385KB
MD5

fc89b4ba7a2a1d2a0ea676d0586115d4
SHA1

2f5dc29a09b9bce6e843b2fe749305a7edd4ebfa
SHA256

b86c558ceb16577fcc2d9d6be6296d4f720786830520a77f5c980c2ea5cbb11b
SHA512

8839c33605d31863592dcfc2accddc2f9d9ea38f6c16eb5e6d7c5b88ba3fb677b2ee2a4e49cec79043e3a9ef52146f5deda84e5ba279fa77bdd3ef3b9960340b
SSDEEP

6144:oNZsxNb7ujIRiBAmwSna/HiOMQVzSVtoc+k9aijaekbl+3rXWB:ogNbSjIcASnafnl0VSc+k9aya1bl5B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc89b4ba7a2a1d2a0ea676d0586115d4_JaffaCakes118

Files

fc89b4ba7a2a1d2a0ea676d0586115d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ