fce8330c83b8ccb96f415e833773cd43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fce8330c83b8ccb96f415e833773cd43_JaffaCakes118
Size

127KB
MD5

fce8330c83b8ccb96f415e833773cd43
SHA1

f24132336a561242420e5901be955bc61b22b176
SHA256

428973b6500969f90b0d9bfdfeac7d16e56cb811b3e0049eec1c6d73659ed083
SHA512

54e1aa1d2c52b2ca97b3e46202aa10f555886a5bc72aed1ed2b7ac41a0051641353911ef6d4795eaed830fb4eb58195d18820da59c6af4e8be7289ff0264321a
SSDEEP

3072:0XqmPW+E0K7IbvJfGSl5Ygr35NjMS7RV/96lNd7eD4hT3T/+/:0XqmdEz7Ijo457klNdC2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fce8330c83b8ccb96f415e833773cd43_JaffaCakes118

Files

fce8330c83b8ccb96f415e833773cd43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ