fe603b170fcce734be4c5af5772e1670_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe603b170fcce734be4c5af5772e1670_JaffaCakes118
Size

385KB
MD5

fe603b170fcce734be4c5af5772e1670
SHA1

905dc8ef3d00674b5281cd5b065a9c5fd242353c
SHA256

55ee5c5d6873f519b76d8e51d483ba79536fd0e56500a157f5581dfb75682339
SHA512

b53561272b41be901924e380669132907eda2b82ddf7c7003f00bb75fe79fd3a5ad48bb013fc5019de3ffac5e77688291732c73314e71af615f984efcadc1a39
SSDEEP

6144:CLgbLikl5ZMBF1JOpSRi9PHLpaqpXMdq74rApTOpvY+0PRUVCl2fJzo2TZAiB:CLgbBfQp0Nr86srWS1qiDfRoyxB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe603b170fcce734be4c5af5772e1670_JaffaCakes118

Files

fe603b170fcce734be4c5af5772e1670_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ