fc5512d82a0a16ee97f1339cedc688e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc5512d82a0a16ee97f1339cedc688e8_JaffaCakes118
Size

303KB
MD5

fc5512d82a0a16ee97f1339cedc688e8
SHA1

e36c4fa8534f56e442e161f586adfa18eac259a9
SHA256

f2033db8241b2f10b3132d200278453f14e3564f2d20ec4184a86516498a9623
SHA512

b6f56f684d0e1634c3bcf460a2f5b0b213f62da1858da1b2664f3c81bdf268bb38edcc5e056affc1561a015b893c0dfebdb01045ee75451bf9144506842f5100
SSDEEP

3072:I8EU6GdwTYBpL/d8mvgwyyMiADtjNwMRjpL/ZJCwMRjpL/thBwMRjpL/vJCwMRj6:fEtjTq/mmvgEGtmQp/9Qp/2Qp/7Qp/Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc5512d82a0a16ee97f1339cedc688e8_JaffaCakes118

Files

fc5512d82a0a16ee97f1339cedc688e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ