fa566812eb533f92ce82ac059c815b10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa566812eb533f92ce82ac059c815b10_JaffaCakes118
Size

741KB
MD5

fa566812eb533f92ce82ac059c815b10
SHA1

040e72565db1a565aade3d4e845b25eba3a0736b
SHA256

31f18480a5e6b227fb64d29f8424028cbbef05467400462c119f207217ad3f44
SHA512

c82d6074d8f7115e892b1765818eeca7a266ec46c1f6b37089d9b3ef60561732f2a3aec8884199b79c8613a5120ebb7bff346e9ac2a5c25c88f3686bb1ed9d40
SSDEEP

12288:S10qF0WPBPtKIWrpP5USLFKTQoH/JJgEKHMgspX0c3kAqP1anoVjIy0XU1gp+uwx:tqCUtKNP5zAdsHNspBhG0noVjEigXw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa566812eb533f92ce82ac059c815b10_JaffaCakes118

Files

fa566812eb533f92ce82ac059c815b10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 560KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ