fad463a57c3f88e8ddca6b67536dd48b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fad463a57c3f88e8ddca6b67536dd48b_JaffaCakes118
Size

228KB
MD5

fad463a57c3f88e8ddca6b67536dd48b
SHA1

c774cd31cdcdaf35e245eefd25b3df70782dd235
SHA256

4674e2219324e0df3164c323b789e8c614513c271ccd2e8b14daed6e25d760f1
SHA512

a94d830bc39384b741a648edfde78d227c3df644a15e085b14691c9cf872370e5b2cef90cf997aaf0d5fad4986cdf9dd5dd000e751a7ddfa1b2468111b0437a5
SSDEEP

6144:HFO8IL0TQesck1txh+eB7fDSAE+eAQOi5DUInKMrQR1:/QBcSxweB7fdHQJUInKMry1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fad463a57c3f88e8ddca6b67536dd48b_JaffaCakes118

Files

fad463a57c3f88e8ddca6b67536dd48b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 269B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 894B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relow
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ