fda9ac351287293d2f79c01b697d8757_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fda9ac351287293d2f79c01b697d8757_JaffaCakes118
Size

1.1MB
MD5

fda9ac351287293d2f79c01b697d8757
SHA1

dc2d4558cbfa17e86db685b4f5a6ae7d1ee33dfb
SHA256

6f880938d493584efa2cfcd897be97e40be77caa0d9122ad9e5b1913ceb06f3f
SHA512

c8f6957b9e547d70a55844680161685fd2836cf2f74e2d411088422c2ad687eeac1e87a2aff2ad25e8a7aa88e98d7e8a78a2f900680f72d9ebc33fd78f0e0a23
SSDEEP

24576:szY6LmmElxThFGVVCm2jzlY8luJAspJiBQCg3RAdhNDQjTjHlr:sE6LDQVhMzCm2PlviAsOHgBAdhNDQjTZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fda9ac351287293d2f79c01b697d8757_JaffaCakes118

Files

fda9ac351287293d2f79c01b697d8757_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

WinLicen
Size: 748KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE