fe951c5a50b69b007a07ae88938b98cb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe951c5a50b69b007a07ae88938b98cb_JaffaCakes118
Size

247KB
MD5

fe951c5a50b69b007a07ae88938b98cb
SHA1

65d4fda2d0a560629d64c436588e7d11dc0c68b3
SHA256

1e5486a67db06f0d2bc1bc603d1a8c9e197c38db4486726d77ce982f83cef5e6
SHA512

3db67483a7846021c71775e83ab2af9767ad4869cf439431a83eadbb80f809c3462849f8d70d32221a8e97bd9691ca98e5a1ac71993068418ec09d7b891e67d2
SSDEEP

6144:2esmzyHFkzF2+YqvzAvAtnYiSgwI3BCt5:2GyHmvJ+hi3BCt5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe951c5a50b69b007a07ae88938b98cb_JaffaCakes118

Files

fe951c5a50b69b007a07ae88938b98cb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CRPT
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE