fed3ac0d58ae157164dc15ca8d38c622_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fed3ac0d58ae157164dc15ca8d38c622_JaffaCakes118
Size

570KB
MD5

fed3ac0d58ae157164dc15ca8d38c622
SHA1

d3e280a55d2ca9a48447b2c1112dd0477c0ca461
SHA256

6895f88d874c94945df29e094823bfef2c6b79f2e3e622473c88b320766c021c
SHA512

e1b806563c0ee59ca313ff7ca850e19241c7926713756faf9ec640c5082dcdd76593ae8c6b8f166493d451233a6353cfab9612aa87059ba0c9f9e2a9c025c17c
SSDEEP

12288:Lw9LXRndsoGUB5omLh3fnnAyBArveMYdr9j5BursR:L48oGUB5rh3vTA/WJKY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fed3ac0d58ae157164dc15ca8d38c622_JaffaCakes118

Files

fed3ac0d58ae157164dc15ca8d38c622_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 461KB - Virtual size: 461KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ