fb64925aa0264dc0656601bff92d14cd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb64925aa0264dc0656601bff92d14cd_JaffaCakes118
Size

123KB
MD5

fb64925aa0264dc0656601bff92d14cd
SHA1

9ec07609f7b6b9cd1f2eb65af1be9d4ffc1198e8
SHA256

67ca05c15d5e60eea94acc6558f0f2dd8c8e25849f8d09b4476dffeb73966569
SHA512

945e64254c52550107d1c4d304c79b890afed1716d6c70d7c4d08b339dc202cefbe76c368d3dbb18d339a1404e819847aade3f785bb6861d1bb5baca7f18133c
SSDEEP

3072:Gr3sq7uokhe9GsnoLzyyTp8z72LoG4C/bx0sJnTaw:Gr3sq7uokhevnInzHxJTaw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb64925aa0264dc0656601bff92d14cd_JaffaCakes118

Files

fb64925aa0264dc0656601bff92d14cd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ