fbb05df01d754b00774d8e2e1bae7474_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbb05df01d754b00774d8e2e1bae7474_JaffaCakes118
Size

292KB
MD5

fbb05df01d754b00774d8e2e1bae7474
SHA1

4abcd9f12c94aeed4e14b661745d6ee0c29bd3e9
SHA256

401302789498d19772b9e6af62f531d52726e37dda2ea6b588c8a6a045b89dbb
SHA512

b79ad922da3c12e9f9f653c7e32dc14f4a7287a9b4d8b5ebf82be5e5e0faf4ab473dbd345ec1997bc5f3214e6cdadd9bf16f9609dafe61bf99b96edd275f58f3
SSDEEP

3072:W+5XCpZRrre6+Cy6ZhqeyyEqWYaEU8QkRQ1zys8:W+5XCpG6+CA+hFQkRQk9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbb05df01d754b00774d8e2e1bae7474_JaffaCakes118

Files

fbb05df01d754b00774d8e2e1bae7474_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 96KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ