fdba877691968bd15477f4a8cf285afd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdba877691968bd15477f4a8cf285afd_JaffaCakes118
Size

1.2MB
MD5

fdba877691968bd15477f4a8cf285afd
SHA1

eaef8bcc90cf3c4f5ff4061112226e2062a2d67a
SHA256

e94db6a7f5b4661c93fdf4be3f3ced002bc09a296563ed5ca2bb0f02e2488321
SHA512

a6f99f74bf273f7bc238c586b497fc1fb1efff0396b250535b503f8e73e8a9b5368b028a19358a9a4e54c496edab737882fb2cb27ab87e19c870918a181375e7
SSDEEP

24576:bn0SdJGv9a5Ngimhz7O+URCVpItB0g8VayrAnvWoBuaNcu5X4tukRCAGRW5AFCn7:LyQeZEp5NkRtgEtkh4tQqD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdba877691968bd15477f4a8cf285afd_JaffaCakes118

Files

fdba877691968bd15477f4a8cf285afd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ