fc5b9029db7d3db7bf474b08ded4fdf3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc5b9029db7d3db7bf474b08ded4fdf3_JaffaCakes118
Size

728KB
MD5

fc5b9029db7d3db7bf474b08ded4fdf3
SHA1

ee6fad0703c568f8d798370595d2197d6febe3fe
SHA256

cea6f1dcd041e1d6c727a0ffd8c0b7f0b8a50d130e8bada17775342127e159df
SHA512

5338efd7160111d15ad47e2822b0ff799e78cb547fa236fff88a30d3a0f52a0c46a88770c500f6f3b64f65250fef86a4eaef7f9e0df3b5244431bd93f5f70b46
SSDEEP

12288:yzaBdj/NCXuAG5DR6BmORvozHI4v8qZyo5aTgnytT:0o9NC/sgo06xvtD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc5b9029db7d3db7bf474b08ded4fdf3_JaffaCakes118

Files

fc5b9029db7d3db7bf474b08ded4fdf3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 598KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ