feb50a75c35385a4ceaaa17d1c89baeb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feb50a75c35385a4ceaaa17d1c89baeb_JaffaCakes118
Size

144KB
MD5

feb50a75c35385a4ceaaa17d1c89baeb
SHA1

8ef9813d95a80b7b41429aca8300b12676f929a5
SHA256

d4a7654b4e768e570006b2c5836bedd91a49347d110b3fad42ae4c3e799f940b
SHA512

75af52afef64b120ffca5106109940ebfd4787db425dca2c5369cc8597e9929e891d5bb002c650547fc6ae2fcf5e0c846aebf9a5639439fc28ad04d226a68346
SSDEEP

3072:4Pm8uc5X/8vik0ruIMU8l1L9BJj4o4lZsQ74LIu1YJKH76pSRJOQXqU:Kuc5Oiuxth4zL7kYe6pqJOQXqU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feb50a75c35385a4ceaaa17d1c89baeb_JaffaCakes118

Files

feb50a75c35385a4ceaaa17d1c89baeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.xfq1v0
Size: 1KB - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.o9xqyu
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: - Virtual size: 3.0MB

.packed
Size: - Virtual size: 432KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 140KB - Virtual size: 144KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE