fa85389cc9429c4347a6c70edf33d8b9_JaffaCakes118 | Triage

Sharing

General

Target

fa85389cc9429c4347a6c70edf33d8b9_JaffaCakes118
Size

95KB
MD5

fa85389cc9429c4347a6c70edf33d8b9
SHA1

32332416900ac5923753579bea42c512bc8801a0
SHA256

45a7f68202242e51e7765fac97db23e81f5b3a61991f0bc49078b89fd428c9eb
SHA512

5816c24e88b1b3f9e4aa0ab7e19d85f694b6ea0a9d106d153d5ab5166066e19b24779229da77c2a3c69385ebb6522f6a29dfc67c2bc6466ffe75d76deea28980
SSDEEP

1536:E3L69rWQFMkVuiXuOj83E0fD/LA3wR5byCEmx+2NZAespdwsXk:E3eJWQG6j+HfTLx5btEE7GwsXk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa85389cc9429c4347a6c70edf33d8b9_JaffaCakes118

Files

fa85389cc9429c4347a6c70edf33d8b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

BSS
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ