fa703d0fa1c758ccd9bb0b4fb4836886_JaffaCakes118 | Triage

Sharing

General

Target

fa703d0fa1c758ccd9bb0b4fb4836886_JaffaCakes118
Size

559KB
MD5

fa703d0fa1c758ccd9bb0b4fb4836886
SHA1

82d2fb52b8e518407a51c00f215770d3a7c13515
SHA256

c605d11b594eebc5044a9df1d41ce9ed7034a9642cc23d0be4b0dcdbdc2355f5
SHA512

dc210fcfcfb00f30255df6995242e4449e85131f55b9353f2b1658fa6403a14366975d4824fcf3396b460099c640e69b93d25dfc188a779a1ff08a8a44cf1a26
SSDEEP

12288:rNE2mijNw+MBKAKI3lYOUTb+ZPcJSG9G99GGG:r6riy+MBFrFwV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa703d0fa1c758ccd9bb0b4fb4836886_JaffaCakes118

Files

fa703d0fa1c758ccd9bb0b4fb4836886_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 359KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ