fea096ab96c0fa9fb69973ea5869bc0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fea096ab96c0fa9fb69973ea5869bc0a_JaffaCakes118
Size

97KB
MD5

fea096ab96c0fa9fb69973ea5869bc0a
SHA1

f9e520f7ce42953b938e5c92d5292be236333933
SHA256

d9d64e401553f430ffe436a1aee4d1e85f0392495e53fa040994f3be77efac8d
SHA512

f898780480a7e5066e8b57190aa7caa717c6136f9fa1707e606688acf3ab238341506a1ce77cb076b5d922ca5f64b6f9e153afcc31c3ccd4985a3125f285b56e
SSDEEP

768:CRcJmQYoeE9F4YqOzrkEHCmdiGRQKfDQ4qCHKA740uGlu/gfw+gh/EexdGnX2Omh:CkmQY6FOO3DBi+fDPXOgOg+FgJiRjdP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fea096ab96c0fa9fb69973ea5869bc0a_JaffaCakes118

Files

fea096ab96c0fa9fb69973ea5869bc0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 300KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dfsaewr4
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ