fb52d3eb403f66b43f0b6a0cfbb261c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb52d3eb403f66b43f0b6a0cfbb261c7_JaffaCakes118
Size

385KB
MD5

fb52d3eb403f66b43f0b6a0cfbb261c7
SHA1

196c7013d750f37f6a6269d5ba76b36faf76a3f2
SHA256

346ee45f64fd32ee21742c7b776fe149816cc21f3a4d81109724a3a6b8c43199
SHA512

412da39ac5c9f7f4f608f6be123f74ffc301369f2b6c4807dcd544b07864d42c184d7955f3cf75e7df57492cfc842e6eef13123b217e97268e7a8ec47296d1ac
SSDEEP

12288:j/Mt9VkoH0bL0x27eKOgleYQGURzpCpTNNXfB:wTVMbL0EKglTQZRzpuXfB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb52d3eb403f66b43f0b6a0cfbb261c7_JaffaCakes118

Files

fb52d3eb403f66b43f0b6a0cfbb261c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ