fa8a32823dd42fc285002a6abb6aca57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa8a32823dd42fc285002a6abb6aca57_JaffaCakes118
Size

1.9MB
MD5

fa8a32823dd42fc285002a6abb6aca57
SHA1

0cd339666c2d04fbd217ef5dc453a5d104136d27
SHA256

87fc995348e1fbf34be7f3cf86d0ed85bba3cd3a43d402805d91afdbab0132ee
SHA512

715bfbf13955827e9480725e79b56fe4cca0635896b1b3a0e4d5aa1aa2d68aaaf9b3ffd4cda8d355570f3bc71d09aeb51155beecb56cc3f825976344bd4933e9
SSDEEP

24576:cr/CzAnyF4hhvPgMfv536/WXzxnIuUVHbUmvVt8cuC3EIBZQcV3xhLA2d:crK3sloBWjCuStBL3PnQkBh02

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa8a32823dd42fc285002a6abb6aca57_JaffaCakes118

Files

fa8a32823dd42fc285002a6abb6aca57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 972KB - Virtual size: 972KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 36B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ