faef544c12f17a74562f1781c3061f9e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faef544c12f17a74562f1781c3061f9e_JaffaCakes118
Size

1014KB
MD5

faef544c12f17a74562f1781c3061f9e
SHA1

6ab9ad6360880b9ab38e1611a7c1100a3b094abe
SHA256

9b5577ee9b1ea3410a8053f50fb183b75242eef417be0cbe343fc3e87b850521
SHA512

3605dfc801cfd136870edd512eca460bb2739b21927eadb3c93a0579876281c34e7e253a953596d40cc581c6c23b6f77fc00721dea0e5d2a4fa98a02e5008fd8
SSDEEP

24576:eJYsNmieIUxHiCDLFMqXU1OIJcpT0vSJX:0MiRUxH/DLO0kOocpT0vSJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faef544c12f17a74562f1781c3061f9e_JaffaCakes118

Files

faef544c12f17a74562f1781c3061f9e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 15KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ