fc99f75e800816503f8185dc86a03d88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc99f75e800816503f8185dc86a03d88_JaffaCakes118
Size

444KB
MD5

fc99f75e800816503f8185dc86a03d88
SHA1

e646319f9414f84cdea61c6259649bcbac263b26
SHA256

8615dd1b4c6be7ea2c8bd5484c5e47a835f28d2be5a9fdf9f53641021b07d92c
SHA512

e42025d6e85d8de42773292bf425e94ba501b03c904ed0baffa350a7d78fab1f672d5f4881d17838fbd0bbbd9023206ca14ca771c6a46984fd050a7cf0ff3ccd
SSDEEP

6144:WCony8KOTqh928RPvmpx5fEj1cRMHyxMV85WqZcJasgpZgzHUOxhUUO36dhS2SWM:WCon3DS2ywiuRbM9BJXgpyz0OxiAdhS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc99f75e800816503f8185dc86a03d88_JaffaCakes118

Files

fc99f75e800816503f8185dc86a03d88_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 378KB - Virtual size: 378KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ