fab3a44ba764d8a2a69629c6b550029f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fab3a44ba764d8a2a69629c6b550029f_JaffaCakes118
Size

380KB
MD5

fab3a44ba764d8a2a69629c6b550029f
SHA1

18f59db238402b9bd2452d1cf5cf27a06029bbda
SHA256

6ad7f71cbc510077e0a6e6755fa1110e580d6cf1c8f6be55fba76a1582c44066
SHA512

f84452dfe85ffc513e605ec605881e2accd1916265f4433f95a8f35270b55086fb653cf3241675afe92ba1c2c4413841c5674ea04145e65f7f69180ceadc5eea
SSDEEP

6144:snN2f1ume/CTCPMLrQbKf+YRIbe75p9nhE7IQbwPL+gZGIefs3uAlK:i2Nume/2IML0OWboD9niwz+gEIh3umK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fab3a44ba764d8a2a69629c6b550029f_JaffaCakes118

Files

fab3a44ba764d8a2a69629c6b550029f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE