fa3200631e87b7704d99fd9f37ec9fe4_JaffaCakes118 | Triage

Sharing

General

Target

fa3200631e87b7704d99fd9f37ec9fe4_JaffaCakes118
Size

158KB
MD5

fa3200631e87b7704d99fd9f37ec9fe4
SHA1

53587bb7f950bddf4c8c00648f32fcdde91461a4
SHA256

5da7dd59b905d814be935800042009109b8fad3ec8afd28a59bdc98bff139712
SHA512

b3c9e325493241bcf7d09ba6da78e2c1a923146c67311ce8647b899933da98a6e494d78cdd1978bab43d069f3c8f79042b5c552723c2508c3e0c1b88c14d3f97
SSDEEP

3072:MZeekPmTVp/vL4qyxkIYYunbhLv1POAlpMQeiOFbG:mVp38qPbYunb7POEnqFb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa3200631e87b7704d99fd9f37ec9fe4_JaffaCakes118

Files

fa3200631e87b7704d99fd9f37ec9fe4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ