fabab477a6e10cea86bc448c20e0d522_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fabab477a6e10cea86bc448c20e0d522_JaffaCakes118
Size

130KB
MD5

fabab477a6e10cea86bc448c20e0d522
SHA1

24a1d01b18930308aa7ffd85f32c32171f5d3355
SHA256

6dabfe3090b7dd3b0742c0db345e7eac9046c5e25ebc7246d94e7853d63f3518
SHA512

8d7413b256ce16289535401fd6a7c2148f6a02b647da92d135e98e437c4ee45c058f8db5b35e68da5e820260f0176db337dd75f9beba07643791bdbdadf3b0f8
SSDEEP

3072:+lkCFMPmdQ0n1hk0cOywD28jD4kwvWifA2R3d4DvU4ZhjA5wGx:QkCFM2Q0n1hkdGnD4kAfA2RiDvU4Zh8K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fabab477a6e10cea86bc448c20e0d522_JaffaCakes118

Files

fabab477a6e10cea86bc448c20e0d522_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ