feb5e4073a4a342dab122770254e9fc7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feb5e4073a4a342dab122770254e9fc7_JaffaCakes118
Size

342KB
MD5

feb5e4073a4a342dab122770254e9fc7
SHA1

6fa81f8d7d1cbd2e2924f3fbcf46a7eb8519e9d8
SHA256

9f94f2b38fd94ad62dd29e96b47b5be54c047c287557785074bbd8c30272f083
SHA512

0d09a110c0472839642841681edfca0fde537896668d49996183fec7260bc430ae0737953d2fd3582dc5ffbda3c2a0d974b3b4632ae50ae1be10663616a61080
SSDEEP

6144:zzG8nriOnW/rGgGpQriR1hpwla4u8fgxZctTxLzrV:31DYrW1hpwla0fg2dLV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feb5e4073a4a342dab122770254e9fc7_JaffaCakes118

Files

feb5e4073a4a342dab122770254e9fc7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ