fdff5d43f32a09b310a708b7b1b8eca1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdff5d43f32a09b310a708b7b1b8eca1_JaffaCakes118
Size

104KB
MD5

fdff5d43f32a09b310a708b7b1b8eca1
SHA1

329e6a29371e09bab2c9384084af19f446a1e4a5
SHA256

8caddf31c9e1a4da354705f7cd81997ee05e30ea1148b1fb87d3f9820d3b2b2c
SHA512

3a7c9350b029df5582422faa4c0e99838fb19126fc831096a1bd38929a0e4967e65b6713bc3d5b5af6aa7bde97dd74046ca63d37522aefd711be57ba2ae20e2d
SSDEEP

3072:aMrFwZS03AYxGe3bOv5uM68rCYz/XFGpxD:hrFw3wYxj6v5uM68GYzkpxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdff5d43f32a09b310a708b7b1b8eca1_JaffaCakes118

Files

fdff5d43f32a09b310a708b7b1b8eca1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata.r
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ccdzwn
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ