fec5ba141126c7dfc28f874050c4d417_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fec5ba141126c7dfc28f874050c4d417_JaffaCakes118
Size

755KB
MD5

fec5ba141126c7dfc28f874050c4d417
SHA1

d99fc54ce2976f00a67d0a02e6d4bee6e5cc2824
SHA256

5d5dce5dd505e6575a7dc6ee29bffcbfbb04883b694b4204a13e1b9dfe2ebe6a
SHA512

bfa0e19084758d99935be7340e1f2647ed83e21aceccb70698a94cf90a0c386afdff8ed0d3fe8ef57a697fb0a585cbc93fd7864cd13707a8ad382890df406467
SSDEEP

12288:+S2PUz7euoBMjNr6C1nVyrcpBNXv0JTMGMc5U84959VWPedhT29b5cvpIEWyB6lv:kPcoOkwYSNX6bMc5c95r/MbipIEWyB6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fec5ba141126c7dfc28f874050c4d417_JaffaCakes118

Files

fec5ba141126c7dfc28f874050c4d417_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 1KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tss
Size: - Virtual size: 641.0MB

.data
Size: - Virtual size: 400KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.map
Size: 751KB - Virtual size: 752KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 943B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE