fe22345b6a29536f7e793c9f50e00644_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe22345b6a29536f7e793c9f50e00644_JaffaCakes118
Size

1.2MB
MD5

fe22345b6a29536f7e793c9f50e00644
SHA1

1d037ea65f26732a9e28270d2597c81f2b5974a5
SHA256

827923def1e2425318c7c0d0fd1f1f1606d2cb667b2cb4f5e46417eccc0225d6
SHA512

ac66d9cc01858c65d2a5697462c5713e7c6555cf36efb01832c7e05944b1de173f00f4a1eab2cb1f645c30fd52522cf50cd242f2003f59f4d38faaaf3f7f8dd3
SSDEEP

24576:c0pIYMLYaDpx2B3qacEbwPf+Tl1xImQ6sI/KQ0CT+phfL:hp1M8+IB3qibwOl1xQ6sseCT+fD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe22345b6a29536f7e793c9f50e00644_JaffaCakes118

Files

fe22345b6a29536f7e793c9f50e00644_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ