fe6b42f537f86f6f0ee870b2367ef418_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe6b42f537f86f6f0ee870b2367ef418_JaffaCakes118
Size

1.0MB
MD5

fe6b42f537f86f6f0ee870b2367ef418
SHA1

daefa68f159cf4c0979a31ef27d31dde2970c488
SHA256

97f560e8d4be659c8a2ee87e531cb7ef9d658a2dc98ede7e01dc73e9486316b8
SHA512

27b4c433c006473c46b178d27a79e4987207e2fba6a72145d3a3f2961554d7bcc69d0fc48caea1accbe05ab41c4279bd270f20c367c44d2b36947454370fa4ef
SSDEEP

12288:LKRPcS823LUJ+K3jRK1Z9Y2fnCjN+iaoozCiG1lHFsc4tHX:Ly34J+EjsY4MPaq9HYX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe6b42f537f86f6f0ee870b2367ef418_JaffaCakes118

Files

fe6b42f537f86f6f0ee870b2367ef418_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 542KB - Virtual size: 542KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ