fe59d833c241b791945490ca912c03fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe59d833c241b791945490ca912c03fe_JaffaCakes118
Size

128KB
MD5

fe59d833c241b791945490ca912c03fe
SHA1

06d009052fd53a1de8d23539e9712239ff59818e
SHA256

21d379428da07f085876548ac9c2dc038ed50674fa35ff6871389a5b0c5b082c
SHA512

571be728e3899d9e9026ba5060cca47d85f3d0093c259d25d00f0ccb8103347874cb33a491f9804db87392e0d75af043a6615e9f2cbddd43c97591bcc7ca4faf
SSDEEP

3072:b/9meiK/JEkmAy+c7HNpdFJGWLWCIidisJQowkBpHE/7iw/Y2zI:r4hpX51LMXtkBI/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe59d833c241b791945490ca912c03fe_JaffaCakes118

Files

fe59d833c241b791945490ca912c03fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 63KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ