fbcbdfa583354f93701481602d356859_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbcbdfa583354f93701481602d356859_JaffaCakes118
Size

410KB
MD5

fbcbdfa583354f93701481602d356859
SHA1

b29b8ad07343e6f3bcc9fed1445bf3b7370379dd
SHA256

fd769701c21559644e2671a27d3ee8985a1a3ee00566efb21d05aa9a8b24ecd7
SHA512

ad6d1c1c18131f5fc02c08b1dfb93d9064b3cd52de11a5b7e0b11b6c879bc9c469a408ee42bcb0c8bada6103782cd5f3f1bc8fcdf5df7763745a3542e524d981
SSDEEP

6144:zPzFJDlv1VaScbQ0QPnHxV1OO4YV6WqLdg5cuO08HQIRAWLhmJsAAWsl+K:d5lv1wS0QZzmT1L6WHHArJsxWi+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbcbdfa583354f93701481602d356859_JaffaCakes118

Files

fbcbdfa583354f93701481602d356859_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 330KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ