fc4321bfb16ee6a8eb210542bfe43b24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc4321bfb16ee6a8eb210542bfe43b24_JaffaCakes118
Size

136KB
MD5

fc4321bfb16ee6a8eb210542bfe43b24
SHA1

27b5d4258b5c7894ced443183c58b173031a0482
SHA256

063a069b181d7c683a3529d7d3c340e7a9f53eef23b8377caabb9b48959b644e
SHA512

fb395d5b077779129aba0e313ccaf2a618c88519b069c3fa40c73e2dceb48f722269201d2ec1d24317bbb021f7e1a6c0f27bc7aa1cd3b34dcf96434a3ca54c15
SSDEEP

3072:IxTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tA3Z/ccqcP1+:q2pdqfv2IPOGfXf5ovWJUKPw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc4321bfb16ee6a8eb210542bfe43b24_JaffaCakes118

Files

fc4321bfb16ee6a8eb210542bfe43b24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ