faaa6ccf6b6bb5bb3ca3b9d0b3f32af6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faaa6ccf6b6bb5bb3ca3b9d0b3f32af6_JaffaCakes118
Size

296KB
MD5

faaa6ccf6b6bb5bb3ca3b9d0b3f32af6
SHA1

30338d0394711fc89fbbc6ed233bbf0c353db127
SHA256

24ca032fb6f9ea4fea32d475e16678866a291cdd4111400b7adb9c4d312fb0f5
SHA512

5b81951f26238b4c01b255dca30b4f68ddd041a4d7391082bc24283b25a0bcd50e026bd2b64e5d1f879ace23a3e41fd6d025d953d57c99381d8eba3c4d797dd9
SSDEEP

6144:zY1LuPiw9IVXbNoJT7iOARd2W27ANtt194K/Iq0SH8L1PBle9+ccC1SSSi:zY4i1Lu1WOARdj27GN/lDHu6cCwSl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faaa6ccf6b6bb5bb3ca3b9d0b3f32af6_JaffaCakes118

Files

faaa6ccf6b6bb5bb3ca3b9d0b3f32af6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 291KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE