fdee76e5e146b8f54579f343fccb0b92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdee76e5e146b8f54579f343fccb0b92_JaffaCakes118
Size

746KB
MD5

fdee76e5e146b8f54579f343fccb0b92
SHA1

219749e6673c337523fff2d5212a8746c5a10b69
SHA256

a83d54b1024283b6e0f28a0991e34a071428ad43fceb45a0c6345852ee8c071d
SHA512

29e7f2249ee14ce6b68a331ed305841cae1544228d29f472243d3fefa23ff0807f587e668e6c0ca96ef1b469aef6a4dc9635180f2345fd6f5849797e58b1e98c
SSDEEP

12288:qRy8S+2U4uan/80dW5A0zyR6JwQ5oAlK+GIWv5TIkAbQQ52LYRg08y5rfR6Bj:2BEU4ucxdW5A2FJr/kWWvZIkA33Dg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdee76e5e146b8f54579f343fccb0b92_JaffaCakes118

Files

fdee76e5e146b8f54579f343fccb0b92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ