fd0e8a7e5c8d0f4cbd0db862d6001180_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd0e8a7e5c8d0f4cbd0db862d6001180_JaffaCakes118
Size

202KB
MD5

fd0e8a7e5c8d0f4cbd0db862d6001180
SHA1

16e732d7252f69954a512f4f27caab0fa1d790b9
SHA256

109f03047636bcddccf8e18d97150510b65e428bb0470867fb664268ff84ca01
SHA512

e0e41160b5567642240b70110a0977073b9e8b3e44d1202079b61cbaf4bd82823523159d6384f3ed98562183169f6bacfb82861fee2e0afc02274f7e10d5815e
SSDEEP

3072:iql6BJvZcdxtIoBXGis+D5XzTiaWKRnxH/txJLF1Db2lSvbnM+mVF45Yv2GzlDxu:NWxs3Bds+JTi2RLFN08bFOFoR2lm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd0e8a7e5c8d0f4cbd0db862d6001180_JaffaCakes118

Files

fd0e8a7e5c8d0f4cbd0db862d6001180_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 276B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ