fa579b43ff352ea3802f060356e27d07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa579b43ff352ea3802f060356e27d07_JaffaCakes118
Size

472KB
MD5

fa579b43ff352ea3802f060356e27d07
SHA1

511d756ce4b5d2ef1f1bda609021eaf53ff81c33
SHA256

89c78b05a010bd59eacebdf62bc99c5639d0545d0ba55358422eaf15d0f97ffe
SHA512

d65498f1265d6606738ec9922fc6041555a3f3d8d7cbb3cf7dd33076fcb7c7d38d7440b70431ce6dbb350b78adc5383024cdb9e70e6a4e193a5a82964d7e6f18
SSDEEP

12288:PTIGt09fbY2RztBOnw2hYBS5mXZZVZZZZZZZZZZZZZZ4eiHeFzFCAoSxVR+:PkR9DjztEnhawewO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa579b43ff352ea3802f060356e27d07_JaffaCakes118

Files

fa579b43ff352ea3802f060356e27d07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

hlkh
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ffff
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rts
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.polet
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asfsf
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eoeoe.
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ennan
Size: 455KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ