fb5e733255f62826efb5a5fc29054cfd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb5e733255f62826efb5a5fc29054cfd_JaffaCakes118
Size

31KB
MD5

fb5e733255f62826efb5a5fc29054cfd
SHA1

e017585ebd9134bac8accfbfa7476850361071de
SHA256

47ae19a353d003089295f46f49845a5f47c72da2602d18c37d27c15111935349
SHA512

92a59e5b3e0bdb07b26bd90b10b09ecc6833dc0661368baab4cb43d11d75875bf4681f86669716edf39566b70ed2d71e21b1f0632ee1680d9f784c83e2ce1495
SSDEEP

768:q00v8qrakujmiGQMqUT6WBaWIKohcZX78KlJ1:q58qO5XC6NQFv1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb5e733255f62826efb5a5fc29054cfd_JaffaCakes118

Files

fb5e733255f62826efb5a5fc29054cfd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 824B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 132KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ