fd254942eafdfdb5aed4352d7b1559c3_JaffaCakes118 | Triage

Sharing

General

Target

fd254942eafdfdb5aed4352d7b1559c3_JaffaCakes118
Size

1000KB
MD5

fd254942eafdfdb5aed4352d7b1559c3
SHA1

1ea24884f0318f9035ba125645a11f9ef5ee5d86
SHA256

37c15e4205aea2abccf686f7d724f1fef612deb1319069e8e01ccc42cabb27fb
SHA512

a403f87ba5cf64d5949dd6a20506a06917ca043aaed74ffc768c8100b08de24a8ba7a43b1aca142f3373001c25cf3e24e7844cfacc5e101ca3bd07aecf1da023
SSDEEP

24576:Gmoh+GH+bKbbxMf/p/1B+5vMiqt0gj2ed:G6c+mPWfqOL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd254942eafdfdb5aed4352d7b1559c3_JaffaCakes118

Files

fd254942eafdfdb5aed4352d7b1559c3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ