fbb5c14d0e595bf4cc2f0e8e29aa7dfc_JaffaCakes118 | Triage

Sharing

General

Target

fbb5c14d0e595bf4cc2f0e8e29aa7dfc_JaffaCakes118
Size

579KB
MD5

fbb5c14d0e595bf4cc2f0e8e29aa7dfc
SHA1

b701e69a96cf287ac57c86635d838c3115f80946
SHA256

c00d451e2e9a7fe9448c0e9706e6450b9a031dd067de5abc42b1c9f364c602c4
SHA512

66a124f40ffc5585dbcf2cddd4a4a8bfe0d941b16bd55db8c8b3d76c34e53e36817135674d9162ee28e8109c2333303242d91b02442f46a29d2d3074cfbc693b
SSDEEP

12288:TwOSpQ2G4aMsWGxdMef6FbH4Jp6sB+BLIwPGkvSKnFNQP:VCRKM/Ujf6FbH86hlIwYwQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbb5c14d0e595bf4cc2f0e8e29aa7dfc_JaffaCakes118

Files

fbb5c14d0e595bf4cc2f0e8e29aa7dfc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 759KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE