fee79d9f5ae8a3c299d37b45be4675e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fee79d9f5ae8a3c299d37b45be4675e0_JaffaCakes118
Size

2.2MB
MD5

fee79d9f5ae8a3c299d37b45be4675e0
SHA1

133968ab7eea0e082b6e20587fb9bde132a022da
SHA256

14cdcb046c41579533d9a7644cfd04db31314ca424d8fe69b8f5f15d7ea22c52
SHA512

287fdadaf05a60c5b2016d84b3a5c0d9935c2c36c008119933d60c8c4f45c92fa32cc2781df0c9185a9bef87e56072860cb7b6512009446cb380b301e29ba3d2
SSDEEP

24576:IzzjD72panDO0XyO6QM7dicWtk/QpzB84umPd0v5QHV7QVE0lzrI7TpB:IznDPNeW0mBpAWlQV/epB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fee79d9f5ae8a3c299d37b45be4675e0_JaffaCakes118

Files

fee79d9f5ae8a3c299d37b45be4675e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ