fde37205aae872cae58f78e969157159_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fde37205aae872cae58f78e969157159_JaffaCakes118
Size

165KB
MD5

fde37205aae872cae58f78e969157159
SHA1

66a99443fd5bf6a48d1541c9aa150e308879d669
SHA256

979f0a8ce28fc0527f38f6bb09cd4bc24f7c5d555bf905fe39f8f725c6c33268
SHA512

2582e0de8c82f292d053c6d15f939b6c47c4d47bc05f32776c972dacd641dd3f448d31c4cca8a0168ddcab24d92c8ad143d6439dbc57aa6175318de595514311
SSDEEP

3072:E3jIorj0Z4Svcf+h02fnPegmdoi710zMQ6+cM1Ybv8aSH:74Lf+h02fPBmdX7mzMQ3v1M8aW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fde37205aae872cae58f78e969157159_JaffaCakes118

Files

fde37205aae872cae58f78e969157159_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 309B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ