feaf52be65cecdcc20f0f1de5cdb09d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feaf52be65cecdcc20f0f1de5cdb09d3_JaffaCakes118
Size

494KB
MD5

feaf52be65cecdcc20f0f1de5cdb09d3
SHA1

35a4db83b093b13aac546fc797c226cac9c52f30
SHA256

c5bcb3e03f9dd41bb3740b1c3091981cda2e2bcd05fa1ed07c85aa6913ba6d50
SHA512

2504ab254b416a0fa4a4156d64b4522ba6dc54b3f5bd6fa3e1cc1a51ab50e787e4fab612feceab7b9f1bb36af3b5bc2af995e71ea52352582a763efecc628e10
SSDEEP

12288:IGusIL3yw7XtvMFsyU58jWvg+CZtPEhv:79TwpELAdvDCHP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feaf52be65cecdcc20f0f1de5cdb09d3_JaffaCakes118

Files

feaf52be65cecdcc20f0f1de5cdb09d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 412KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ