fa5769c6cd3056ee73bb2f7110ba0b1d_JaffaCakes118 | Triage

Sharing

General

Target

fa5769c6cd3056ee73bb2f7110ba0b1d_JaffaCakes118
Size

560KB
MD5

fa5769c6cd3056ee73bb2f7110ba0b1d
SHA1

ffa984ed91cd84ca90d6abd362dc910218bee34a
SHA256

e93df5ac1145dddee047bc4347d87607d43b038fbd69b8edde0067303201a676
SHA512

0fd9449986782f623f7e357201943816cbc86673c6404e9309a4773daeed454cafc36a6d51a0052424a5defba856ab6baa363349b021b76c63e4927f794a16eb
SSDEEP

12288:xBpQ8wUdJQzWWCsuhUudMswCX52x8WeGRb4t:/pRZdJQzWHsuhrdMOpUfQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa5769c6cd3056ee73bb2f7110ba0b1d_JaffaCakes118

Files

fa5769c6cd3056ee73bb2f7110ba0b1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

NP

Sections

CODE
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 59B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 413KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ