fb23995ab65c58c6b69c61a9817993e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb23995ab65c58c6b69c61a9817993e9_JaffaCakes118
Size

138KB
MD5

fb23995ab65c58c6b69c61a9817993e9
SHA1

bc8984e3fe3a751c6657b2205b380c5196b7caf0
SHA256

c479a4798786dd61b73d3e66e5850548a1be78822798223611a2402d9444cfd6
SHA512

20ba93646373404d865a786bb0b20171327fe09ec157ce87e90b2c793bd3e61b8a636567f1c6f44b543c4e9a79ffe14a3e63c7e71ce0799b897f6e8112046338
SSDEEP

3072:l8SS8xFVxue6vvdpgS0XLmDKW00Lf2AdsZVwuoZSTWuCXVn/lqzPw:K3cge6ngvuL2AdsZVwuUu0ZlW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb23995ab65c58c6b69c61a9817993e9_JaffaCakes118

Files

fb23995ab65c58c6b69c61a9817993e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ