General

  • Target

    fadf001c3ce33fd2e778ba7e927b95e9_JaffaCakes118

  • Size

    6.9MB

  • MD5

    fadf001c3ce33fd2e778ba7e927b95e9

  • SHA1

    a2ec51a763893f6cb2bb3b15f2d7914e8d24bc6a

  • SHA256

    0dcc48372bf6f6bc75ccb96c219487bf26c722004116344930cbc8f2943e8517

  • SHA512

    f821df292b38705f3804502fd70d3ba612ea21b9531953f0b6684dbbcb87455aa127016d109e50b86f3472c9382b7ad60ae548c60c7c1a471f6b36b050697ce4

  • SSDEEP

    196608:Wy3ENUESFE/U4tZEKheWFqqN/EVJ7FD7lhmA4ClqnqDG+:W+ENUESFE/U4tZEKhhqq+VJ7FD7lhmA4

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fadf001c3ce33fd2e778ba7e927b95e9_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    1d0fd4c44a4ecd5257a4c071c70a4490


    Headers

    Imports

    Exports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/BMIWQDA
  • .rsrc/0/RCDATA/CVFXMN
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/UIUVVXORALHQFWO
  • .rsrc/0/RCDATA/WIJNUPWGNOBU
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1033/RCDATA/CHARTABLE
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/DIC
    .vbs
  • .rsrc/1049/RCDATA/FBEHIPONXDKJCMEPEC
  • .rsrc/1049/RCDATA/KBOKGDQV
  • .rsrc/1049/RCDATA/OONEWWIKJNCWPTTDX
  • .rsrc/1049/RCDATA/SLMQYBPT
  • .rsrc/1049/RCDATA/TRCNSDULEKN
  • .rsrc/1049/RCDATA/UTJUIQEX
  • .rsrc/1049/RCDATA/UURDRRY
  • .text
  • .tls