fef7b15e5c2b736cf7a5dbea0eaf2516_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fef7b15e5c2b736cf7a5dbea0eaf2516_JaffaCakes118
Size

565KB
MD5

fef7b15e5c2b736cf7a5dbea0eaf2516
SHA1

7fe0668152210e9999b776099650e06732d08371
SHA256

60e9d55833dcd496ce813963819e03e3e81b5a98dc6ccf6506c4cb5f50a958d5
SHA512

54965e34a252d18bc3798a4937234b0e0fc342b71b2216c8224af971a427f1f9cdc93ce669fe4a42b83609530f05d9c945c227cb1a7b54d729205e740e0b6448
SSDEEP

12288:6Eea9h/ITaJHE9d2II3LrYv30uy6OLA+eu9Q62781+a0INtUBT:nz0jqpovr4PuS1+DINyB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fef7b15e5c2b736cf7a5dbea0eaf2516_JaffaCakes118

Files

fef7b15e5c2b736cf7a5dbea0eaf2516_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 475KB - Virtual size: 475KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ