fb4e97fffcec9124fea75fa0474637f1_JaffaCakes118 | Triage

Sharing

General

Target

fb4e97fffcec9124fea75fa0474637f1_JaffaCakes118
Size

77KB
MD5

fb4e97fffcec9124fea75fa0474637f1
SHA1

ed85876d34d85fe7d80cf93cb80823573bc2d7e2
SHA256

4c4de8749c5f52e3ae95921bdd3f5142b3a5bd53ae101d33b15a006117a6a097
SHA512

577ec5e56068ca55c6b35c448deace1d9b9c02f423ff1932a87c3a05427bf500afca3fac4b566a15dee1226507e28c6535f7b1cb1113c8f8d70f664a610f32a3
SSDEEP

1536:T71q+1QTyimXNJlizBKKBafzYID1fJKcvfiVqstjhX07TISGQlaAs/6nQFQUd5O:r1uyXXj+7S8ID1fnavt1E7TEQkAs/6sl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb4e97fffcec9124fea75fa0474637f1_JaffaCakes118

Files

fb4e97fffcec9124fea75fa0474637f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ