fc617f84d1a67fcb307b157c2116b970_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc617f84d1a67fcb307b157c2116b970_JaffaCakes118
Size

195KB
MD5

fc617f84d1a67fcb307b157c2116b970
SHA1

cbe7ede9634fe1113047f77f9f801f2356006982
SHA256

c5082f14ec7092c657f91f7a8caee1428284cb968a9156a3e47a47d76bb9da2f
SHA512

8aceebe2d736936f10eac2804d4e3a8d20aa511cf412a632a36803bd17686d84ce35836be32433a679e1e00dc0e312a033843e8724e6cdb03654a3f73726462e
SSDEEP

6144:gJAcVovfoG86eBMtxFMg0hrpBe9cpJD+AbK/w2cB4B+29LZPjyyXI:gJPgfR85BMtxFMXhr1oX7BjyD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc617f84d1a67fcb307b157c2116b970_JaffaCakes118

Files

fc617f84d1a67fcb307b157c2116b970_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 735B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 37B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ