fa9f778c8aa0a098c7d5d48d2a431840_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa9f778c8aa0a098c7d5d48d2a431840_JaffaCakes118
Size

358KB
MD5

fa9f778c8aa0a098c7d5d48d2a431840
SHA1

52fe1cffa05a6c4a750a195ce98bc0bf17f58196
SHA256

6b767dfe254e8f4f6f55ac57064cddd574580a96e7483ce3212b6716e6ead7a7
SHA512

7a3c5fd102658bd537d0a400ebed8c002370aef9277136cfecf8a3c8c09f045351c52aa885a2bf5eb24b8e4d11b10ac1714273faca42e0c4dd30b5f79dd3cd4d
SSDEEP

6144:wHWzhKHWxJ+VXJ5z/Wd8ftWs4CFQc46inZ/uRTBoCtnl:zhyWxJ+L5259CFlc/uFBhv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa9f778c8aa0a098c7d5d48d2a431840_JaffaCakes118

Files

fa9f778c8aa0a098c7d5d48d2a431840_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ