fb33c5ff1e61b628b13220649c6638f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb33c5ff1e61b628b13220649c6638f2_JaffaCakes118
Size

200KB
MD5

fb33c5ff1e61b628b13220649c6638f2
SHA1

db5c735eb1fad65294e7137f5ad9f631221ba6c9
SHA256

fe1b0f46efb379f85bbbe58866eea7f1a559287952958b991606f3755f6b5330
SHA512

21e3c61f2fba8eec40c75f0243d3df77d3c9cd56b0cbd64d0a9aecc9944444f60094cdc94a881b41aee5d0edd662105a2aabc61396341eba3a4c8a38c5c5a10e
SSDEEP

1536:rC+87y+HgYMF434xld9YLU9KD02BxAcK9SPoYZwAtd:rChJgYMm4xf9cU9KQ2BxA59SPMq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb33c5ff1e61b628b13220649c6638f2_JaffaCakes118

Files

fb33c5ff1e61b628b13220649c6638f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE