fdf306a3117575afe95b8e554317ef36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdf306a3117575afe95b8e554317ef36_JaffaCakes118
Size

1.3MB
MD5

fdf306a3117575afe95b8e554317ef36
SHA1

5b4b2111d027e32aff755ff6dc91f66b2456ae28
SHA256

bebab024a11af59ea6819076607848423bd61f9f940b84eb83e8ddc8cf7a6def
SHA512

9d7ef1eb280075933fe5e5bae8e3adafe3557d75affcbe241e3eb2d31fa12efaec4db7bdc38c48c5dfa7d972e3cc4398a342d0ba02ebe9ec8433ee6ad0a01a78
SSDEEP

24576:MmDEjhDRzFAmyjrF+5khf3SflZd1f0fgKy4chdVbxA46A5Fzxuv5zLDb/:MmDE9BAmPEODichdVe46A53MXH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdf306a3117575afe95b8e554317ef36_JaffaCakes118

Files

fdf306a3117575afe95b8e554317ef36_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ