fa5ff88f31106d0a70deef55c5a2caf5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa5ff88f31106d0a70deef55c5a2caf5_JaffaCakes118
Size

115KB
MD5

fa5ff88f31106d0a70deef55c5a2caf5
SHA1

cd2894dce29be9fb75d0739e25890f31d0b55978
SHA256

25ea9a8fb4508adf87487bbf288a0dcf737357cb73b1a1288374ec7a04daab74
SHA512

9aa61b59904762f63398a6fc0916791d3d52fde5df55d1bd73794a01d52255bb9ff0fed8969bbf56e88f697d63011e9c0441ee0effa03bec9ef09c05d396e627
SSDEEP

3072:Bf8wNOO5/bHoUYmxF44UkbZEvoAsLmMWCnXG:Bn5dn4rkWgyAXG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa5ff88f31106d0a70deef55c5a2caf5_JaffaCakes118

Files

fa5ff88f31106d0a70deef55c5a2caf5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 80KB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ebut
Size: 30KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE