fe89c239ff825474b15b07cbb894f167_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe89c239ff825474b15b07cbb894f167_JaffaCakes118
Size

385KB
MD5

fe89c239ff825474b15b07cbb894f167
SHA1

2674f1a42c1553734e6fa58b9e1cda2c642f2ed9
SHA256

ba09ff082345c25db38bc1fbac305c9d1c9bb815a175d373909db09303e649d7
SHA512

eaa4694fbbab9c45a6b92065817799aabc24e82ead0cb4f6ba13b4ee90e174397039fe4e91f4f62e7585a3e1f2f4f80fc2959149fa20a42f2c644d1d8c054f56
SSDEEP

12288:S6OUAj3pR2HUunv1gBdXuXe1vxI6EgvkB:S6O3WHUunC+wve6EdB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe89c239ff825474b15b07cbb894f167_JaffaCakes118

Files

fe89c239ff825474b15b07cbb894f167_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ