fe7d67248a9da6071edeec47d70df609_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe7d67248a9da6071edeec47d70df609_JaffaCakes118
Size

876KB
MD5

fe7d67248a9da6071edeec47d70df609
SHA1

38e7c113a9e4c9351fe9bf675ee6c9961bb4a75b
SHA256

9a96b9036c66d21c804f56ebc031adf5d9fb7ffee3bbc78369c72d4d829e1410
SHA512

83ff227b0ec309b93f9cfa714f3105b980a3d14573d85eb2ce077002fa4496913fd611347471db8758e752f988ea6b1b4ba816cd38cea7d6fd204219415a4391
SSDEEP

12288:c7JpdGuGM+pCeWg6h9Nyz8wM/SSw5T8iHaCI2zb3RRyAEPgfaKHJ7IU:q3GM+pFsM26PdI8FoAEPKH9IU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe7d67248a9da6071edeec47d70df609_JaffaCakes118

Files

fe7d67248a9da6071edeec47d70df609_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 600KB - Virtual size: 599KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ