faa1785fb9f900c10cf4e6698a87b9bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faa1785fb9f900c10cf4e6698a87b9bf_JaffaCakes118
Size

214KB
MD5

faa1785fb9f900c10cf4e6698a87b9bf
SHA1

d7f8b21177b955ff4fcb0860de1f5883f16331e3
SHA256

b46cfdc93a4ce640c832a603950ef9445d5e67c8a0830e978fdb07102299ca8e
SHA512

b4918a93c29f5fb12bdaec4c9b913bd107b388a1d18b1d64be6cc776e6d89b5f914c70accd0455d291c0fec67dd0b40825a5997c1b88aa10d55e45c6279e23cf
SSDEEP

6144:KAlNqtNBImouJpOCXQ8QPyZO4DqZtRVup1:KACNBItWbDqLup1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faa1785fb9f900c10cf4e6698a87b9bf_JaffaCakes118

Files

faa1785fb9f900c10cf4e6698a87b9bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.data
Size: 201KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.shield
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE