fec121c485383810ffc03b9c20ee6d79_JaffaCakes118 | Triage

Sharing

General

Target

fec121c485383810ffc03b9c20ee6d79_JaffaCakes118
Size

506KB
MD5

fec121c485383810ffc03b9c20ee6d79
SHA1

941a09b0d54c60565e600484ca165788b7a20d8a
SHA256

633da75617d3138d9574e8ea51d2dfc1c9128459513cc639069c2cff18a97d49
SHA512

bdc6c1efc745fe5c6efd8b4c08c0dee159ad19bcd6b329aea4c677f8a82246a7f58cb75aea7be2f8a2939d0d8bee30bf2db5e6b6aa8f51b1a1defb9230ae1b78
SSDEEP

12288:NIUSnnX7K5GI73Yn5jO9YeazpUy4kY/2LJ4RCeHiG9:NIdnrWG0YjO9YeqJOCGiG9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fec121c485383810ffc03b9c20ee6d79_JaffaCakes118

Files

fec121c485383810ffc03b9c20ee6d79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ