faf4e1d2a4f71e1d4c00895044e71d9b_JaffaCakes118 | Triage

Sharing

General

Target

faf4e1d2a4f71e1d4c00895044e71d9b_JaffaCakes118
Size

199KB
MD5

faf4e1d2a4f71e1d4c00895044e71d9b
SHA1

4e240c2fc1772fe0124f0cbe0838e9189a633e4d
SHA256

b98dc4f3d4a7048ab649bcb48473d4b63b7fe0cda9d1356f21ac4735e5b65422
SHA512

280d894cae40082fe162073a213a7b5ba85865d28b87695b22607e3c83eaf920ae5d13608c4fef580c15e666ad6f274644bda8b28e7d4f8dfaceb18162eea9a9
SSDEEP

6144:Nhj2L2PK0Biiq0Bi59rZuAXsnh1xbM+Xjb:4K7nbAZel9jb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf4e1d2a4f71e1d4c00895044e71d9b_JaffaCakes118

Files

faf4e1d2a4f71e1d4c00895044e71d9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ