fd800ee0fd9cfc902f59752d17ea8b29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd800ee0fd9cfc902f59752d17ea8b29_JaffaCakes118
Size

1.3MB
MD5

fd800ee0fd9cfc902f59752d17ea8b29
SHA1

001e6427b8f3352419bc14565ed4bc2a34e1fb2b
SHA256

7e29971e3850740a56b0a0a3fbc5024f9a7b7315987e49db822743d575c0d2d0
SHA512

9dfc72c28d5e5181ffe8df16ac6d6219637b77991f9eee1186048eb5bb5fcb6af27be519075ddbe5ffde141bdb72b6608af7896f030415a9db514d043175b2c5
SSDEEP

24576:bxrsF+9YmQyCWwdWGojcqCV7mfMF/sLRZSts9N:0+98y/oYPCV7SMFWHStsD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd800ee0fd9cfc902f59752d17ea8b29_JaffaCakes118

Files

fd800ee0fd9cfc902f59752d17ea8b29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.itext
Size: 6KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.const
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ