fa730b73bf416060b913d36e0bfbecbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa730b73bf416060b913d36e0bfbecbb_JaffaCakes118
Size

384KB
MD5

fa730b73bf416060b913d36e0bfbecbb
SHA1

3d353826b48b7c50d2381ee1b7782fb8d60d7f5f
SHA256

50f2f7b866a4a547727016ce1bc3a01784fb08c5a358be8c4b8a648da4942e04
SHA512

57559e34559be028a7e43a1b13d3a110f9195b8757b0731c9a6267c227a9c9bf1056cf8d7838f0320ab64be47208bb23c4b1f42233148c1409b33880e4335198
SSDEEP

6144:b7BpUw4XMzvWa01j2qWc0yUXVasO91trllFTcyTHlS34dO64gubxUlAfSX:Zpv4XgWaSrWcnbPtr3FZSodO64nxaAfS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa730b73bf416060b913d36e0bfbecbb_JaffaCakes118

Files

fa730b73bf416060b913d36e0bfbecbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ