fa7825d572d6ac7a344244e9645a127b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa7825d572d6ac7a344244e9645a127b_JaffaCakes118
Size

5KB
MD5

fa7825d572d6ac7a344244e9645a127b
SHA1

048a5ee81f08c0b4db0d4ad56721c1a9d62baeb4
SHA256

16e118cf2415073dd0bcb77c59b2b051b3d9f446ff5e3116cc2b3a09b78fb6a9
SHA512

7dd567059ba9e14f4b60fdc59aa0b473c5fee5cc77bdebc943d841bb22cbe9194640ec869d9396a9d7e4acd3b7da0ca3d0f3ea8c6d99aad2c37f8c61f7ee662f
SSDEEP

96:eL69cuqai5ufy1/Eq4wynJQTxhZ94dG+kbmlFWeqZj:C+cuqZwfy1Mpw4yTx39aKyFZqZj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa7825d572d6ac7a344244e9645a127b_JaffaCakes118

Files

fa7825d572d6ac7a344244e9645a127b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 864KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ