fe21d506b6628742213035be0c8f3567_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe21d506b6628742213035be0c8f3567_JaffaCakes118
Size

635KB
MD5

fe21d506b6628742213035be0c8f3567
SHA1

fa2d3528f2f5fe5cdd62b323a728b5bc7976487d
SHA256

82c2aab2c331f8e2bf9a1e9e9f16a739e46a969c8a1b1e4930bff64b3b4e98cf
SHA512

6bea18271456a88778c2e16bdfd72d2f8a4f857efb88698cf2bc7f83a886a50bccb215b76ab4b59c355bab616535195d9eb5a6184fe04597e6104a8eaa86557c
SSDEEP

12288:3WOHzgGmfiWvJwZgYRJUeFHgQ1fYSYLoAMi1:mOHzE6WvJwZ1LjgQ1faLoAM+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe21d506b6628742213035be0c8f3567_JaffaCakes118

Files

fe21d506b6628742213035be0c8f3567_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 562KB - Virtual size: 561KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ