fd017f4e0ad954c6604d2b9656f10ae5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd017f4e0ad954c6604d2b9656f10ae5_JaffaCakes118
Size

149KB
MD5

fd017f4e0ad954c6604d2b9656f10ae5
SHA1

86e913c9366a061e786d747dcbd4f07709a458c6
SHA256

ece502e13b43ae4c0f908a4908d3b8b3a8f750c0d496fed579e8acda0a02c2ee
SHA512

6f9ec1ede2114c2242d8a00b96156d050655d423eb68387305dede3ca00cbfbe8e8cf000882a48ae1ad50d9dd885dce21d83c5bbff4823033b8e68a6e163a95e
SSDEEP

3072:owourcSc1dFPY5Z5LzjvBT6AnTlQ0LGvPnlsPzE1oLZ+1xiSqEEyxd:TYS0+5jL/BTFpJooQxiSqSr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd017f4e0ad954c6604d2b9656f10ae5_JaffaCakes118

Files

fd017f4e0ad954c6604d2b9656f10ae5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 16.1MB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE