fabf909cb08fbb41d86f396387fad53b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fabf909cb08fbb41d86f396387fad53b_JaffaCakes118
Size

440KB
MD5

fabf909cb08fbb41d86f396387fad53b
SHA1

a1663f5ac030d0820966ded2e854656e603418bb
SHA256

5677dbc5bd032238c44cf32158e90ebd589013c3e77b128e949da741ecee21bd
SHA512

d8cca134082051ac1a9993120f05e3ae832c718463c37bf26d20a94537328c7c14867ba8cee2daffe7e2d4eb2322f96c37d0987101b4c3a19d69c78be91a14c9
SSDEEP

6144:G+Q2Af2lkALT0RZA3B9c6whEEBWS8Zck7wrSRzTjX0R0H0cDGXj3pTwkR:G+nARZA3BS6CEEBWSO5wrS9H70cD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fabf909cb08fbb41d86f396387fad53b_JaffaCakes118

Files

fabf909cb08fbb41d86f396387fad53b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 17KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

x66a
Size: 404KB - Virtual size: 908KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE