fef4f5f202e5afd6563f85b0d60aebdd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fef4f5f202e5afd6563f85b0d60aebdd_JaffaCakes118
Size

1.6MB
MD5

fef4f5f202e5afd6563f85b0d60aebdd
SHA1

59a9061aa9de657cfe5b692e73fab2a3571657fc
SHA256

a32e4e1c7d896f06188efda5b0aaa37b9cca10c36c5e57782a37ffff13746e6c
SHA512

b0bd35c65ce77a75217cc1178419579052bd9bd805543e2baa60e14f2fed9572b6574b2f045a5af0d0708ea3c074fe5c340d0315c55ef64dd6023559eb0f52ad
SSDEEP

24576:UXWmAF3meAHSA273lNKk+T4acadD8J07ZUGzTuCSdMPiFwdhV7aVuGZ:U7eAHmHKr4dGYkZUCXSdMKF6hV7wZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fef4f5f202e5afd6563f85b0d60aebdd_JaffaCakes118

Files

fef4f5f202e5afd6563f85b0d60aebdd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ