faf5599ee9e3ce407d49f609fae67c0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faf5599ee9e3ce407d49f609fae67c0c_JaffaCakes118
Size

125KB
MD5

faf5599ee9e3ce407d49f609fae67c0c
SHA1

fa5c54dd50eb49b7844f71ca5e178379fdb8a136
SHA256

e17eed8623d147ba2f4677db43d4f78e10a76412541b70898db9efb6babd7f80
SHA512

d44ba122bb3d59819032252a427de9e8c758bc38dbe835fc9b74e88cd0e90f0eefed1e79eaad2d485a2528610066a7a3152c2ee81ebe781b12f1755c15f68944
SSDEEP

1536:FbqxQTLgZ5B/5Ba6hOzLHOqiA1y4I3Xi0DqDg4JjSTbKJedhKDw6oW:MGLSCxLxiA1N+DqDg4+Bd4Dw6R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf5599ee9e3ce407d49f609fae67c0c_JaffaCakes118

Files

faf5599ee9e3ce407d49f609fae67c0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ