fa8f81cc3ba886e6b450ffebcefe56f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa8f81cc3ba886e6b450ffebcefe56f2_JaffaCakes118
Size

282KB
MD5

fa8f81cc3ba886e6b450ffebcefe56f2
SHA1

5830d22a4fa2cb515608ce22ef5143a9331c8243
SHA256

07194b32e1b894acb37c23c2945475573bf08f87becdb061d647fb27a5087816
SHA512

a5597abadbc9531f0ec94b807f1c5023b0c2f4d52283d23d159ea4c623f82548d9a7345b9ff3bb685bc11474ff2df3663e5fb5908eef1e486919aae582074366
SSDEEP

6144:sRHeRydC+5+s49UGBoKsMYt8NXh3c1SbygMrA5:ieRydXh49doKsntQx3cwme

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa8f81cc3ba886e6b450ffebcefe56f2_JaffaCakes118

Files

fa8f81cc3ba886e6b450ffebcefe56f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ