fa8150e8b444e13b419d2684a6254e9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa8150e8b444e13b419d2684a6254e9b_JaffaCakes118
Size

3.0MB
MD5

fa8150e8b444e13b419d2684a6254e9b
SHA1

58549547b3b99dc4c63f2bcdc098e6e156f59350
SHA256

f48c6269acb722c7fa862542d29d916ce09cba4b68eb82c50bd66e821b52e084
SHA512

4eb45a939e8480f0b8aa11d24983b1316952cb0e17e4883a56a71a0f2cbe0600febea64c1430ae2dbaef77ad307281acb2c33735dc2c203398589836200e091f
SSDEEP

49152:SWuKPzvoS7hDkYOMwwnMb4PmyVEHF+3j5D78OBUC/IabjKoh9WsY:lzws+YOXwnS4rVoCs1SIabjKoh9WsY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa8150e8b444e13b419d2684a6254e9b_JaffaCakes118

Files

fa8150e8b444e13b419d2684a6254e9b_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2r\x-none\setlang.pdb

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 300B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ