fd4be6f9339456fb5b6959229acc2600_JaffaCakes118 | Triage

Sharing

General

Target

fd4be6f9339456fb5b6959229acc2600_JaffaCakes118
Size

572KB
MD5

fd4be6f9339456fb5b6959229acc2600
SHA1

84d6334d3b01cca47679db66bdb16597484cbe57
SHA256

eeba32a8448dafc7fce8e6c1c3992d7ef7fdbbdf849651bee7dae601a557dbac
SHA512

935d53876332a878ea2c95ca9ac691dbfda463f8580ddbd7c0ef996235e0564fad003b04dd40e3ca78d3d69e94527dd7b844f9498a6a00343b0a3c840f45cddb
SSDEEP

12288:e5rXsq7+iGS2tKBwpcrqnlsP+xnKyHXn6rEjoUe:0rb7D2tKQcCm+VX6UoUe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd4be6f9339456fb5b6959229acc2600_JaffaCakes118

Files

fd4be6f9339456fb5b6959229acc2600_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 377KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ