fa99928e34580495127da1c9c6fe39a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa99928e34580495127da1c9c6fe39a0_JaffaCakes118
Size

222KB
MD5

fa99928e34580495127da1c9c6fe39a0
SHA1

54f813359e42eb23783b32659fdf3725331fa978
SHA256

734d73bd7280c6b823086a491e097d8100a78293a67edc843a44d6fd10d8f398
SHA512

07f9c6e13f1c8c2e10cea1a6b24f20a9194769dff01bd9bae38337f6832b2e285703cbbf992d575647f0f4cf346dbd11eaa617b81d5badcd4dfd7a12ac9d48b4
SSDEEP

6144:CcPNabiBY1BUFpwCwkZysNqjEiOZwMXJV4t:CcoUFp44qvow4+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa99928e34580495127da1c9c6fe39a0_JaffaCakes118

Files

fa99928e34580495127da1c9c6fe39a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 321B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ