fb3f295689de84c99b0e81b94af991a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb3f295689de84c99b0e81b94af991a1_JaffaCakes118
Size

5.1MB
MD5

fb3f295689de84c99b0e81b94af991a1
SHA1

afddfbc05c5943ea2e41835c50e1372d661f4fee
SHA256

39e39bbefa7361f95685a0b2f9dd0d417bdb277e3d763153f1788793fb9b5fc8
SHA512

aaeef5d2e4926011ad852c1ef5c18a1ac26d888b346a4ffe61f73cac350a99c8543937e5a38190514b4d95ac1ebef3221f515e1bfbe9f96494b6db2e4f0d939f
SSDEEP

24576:/RUJBOj84rjBw4Q0Ttrd6Xupb+FqKtQMMKxHnqF5Tlk2z6VMH+1/KwxLRxIQx/tq:eh26KtryQC/wBlkc4MevRn/tH3Hy/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb3f295689de84c99b0e81b94af991a1_JaffaCakes118

Files

fb3f295689de84c99b0e81b94af991a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1011KB - Virtual size: 1011KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ