fd8f520f9bab2e22397a6106d9900f4f_JaffaCakes118 | Triage

Sharing

General

Target

fd8f520f9bab2e22397a6106d9900f4f_JaffaCakes118
Size

2.4MB
MD5

fd8f520f9bab2e22397a6106d9900f4f
SHA1

8f2042eb7fdf2270b38c4d83c08cd471b15196d9
SHA256

94f6681cbe2758416d88c1da1d73566e568ce98688b228fde8e0a96ac8400c85
SHA512

fa649f0ca4f60dfdc5f17f6c87536738db6be5692a7b0f97cbeefa99423e2259bd62958f2014809110a504ac374b0fdb638f9a95111859cd11484101b7966e1b
SSDEEP

49152:39OVHMn9ZoRUchRgsODXqXY72di2jdyhWBMqzLGaW+D:30HMn9FqXy2EEUhSfGUD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd8f520f9bab2e22397a6106d9900f4f_JaffaCakes118

Files

fd8f520f9bab2e22397a6106d9900f4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 573KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 216B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ