fc4ab4ef39a1112f767112d62b24fd10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc4ab4ef39a1112f767112d62b24fd10_JaffaCakes118
Size

312KB
MD5

fc4ab4ef39a1112f767112d62b24fd10
SHA1

b98c1c5b2e5345a1fc99f471c4ae5b796eb07e97
SHA256

2ff83d86c5b9376b95c3dbca2f9ab81ed5589e9285cb6d371d15248334458f84
SHA512

37fbeaa86b05be9cb33e39862c000184a1583e79856bb15e74622bade91984defae06233e3a8eb08870efbe53502e240c86d58e84efb04d3a39241fe65d00b80
SSDEEP

6144:/tJJyYcpYvpgpnk58JcaAmqKOCtu2i1If78cbA1Uqx8lb/TSavzSt+yd:/tJAJmsM8JZAi5u2iy78cEYlb/TSJt+U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Alexa/Alexa.exe

Files

fc4ab4ef39a1112f767112d62b24fd10_JaffaCakes118
.rar
Alexa/Alexa.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 556KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ