fc9295f8764a166c5b0d7891984282f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc9295f8764a166c5b0d7891984282f4_JaffaCakes118
Size

16KB
MD5

fc9295f8764a166c5b0d7891984282f4
SHA1

9f9ce9010a037cc1c0d442a1a5a58aca505e013c
SHA256

ba6beb03c699c9a339a83177968e9d2164ffc6474e5b6e5483b23df7daa74c4b
SHA512

32b07833a37cfa4948ce48210dae4335113e3e9283036276d2039626a56109ef100c99217d0c3c6f6b67643c85b4d6a0c0f85f3e419931887c8e50991e2f30d2
SSDEEP

192:n8JHSn95v5ZEAyIjp1sN/8yBI9dycWqGFsOTsAfZEQjcW2u1Imj7ug:KezhZEAyI91y8yC9/WnuisGWAzYmjF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc9295f8764a166c5b0d7891984282f4_JaffaCakes118

Files

fc9295f8764a166c5b0d7891984282f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ