fad9e6e927f82a5cd29fa7369556c853_JaffaCakes118 | Triage

Sharing

General

Target

fad9e6e927f82a5cd29fa7369556c853_JaffaCakes118
Size

131KB
MD5

fad9e6e927f82a5cd29fa7369556c853
SHA1

aa09d650eec166d379a32ceca8ab155db59b59e1
SHA256

cd3792e5cd0467e36b3ed21b74ae20759d256595efde4ffa865fbda8cea4a552
SHA512

71cf3a02b1cc34f76a245bd7d465b1a545a225f7aef74c8d404f5d79e5e9627f103a7560f178fc1ad43dd8e64e9a764504555a2cc64fc282b28248cd5e2cd714
SSDEEP

3072:PLReQpyHCgiik6e8WgfBN2Mowh/FVIzVDZtYdzw/OCc:DEQpwiiXeTgfTVWDZtYdE/Rc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fad9e6e927f82a5cd29fa7369556c853_JaffaCakes118

Files

fad9e6e927f82a5cd29fa7369556c853_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ