fb8c79d734d5ae0c97a401d9b2a9c179_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb8c79d734d5ae0c97a401d9b2a9c179_JaffaCakes118
Size

126KB
MD5

fb8c79d734d5ae0c97a401d9b2a9c179
SHA1

4f1bcddd59a316aa169ddb682433d39b52acb9fc
SHA256

9cb0fac884b1e2f915b0743bab3bb30acbc002f236eb3000fd15e4b08080a0cc
SHA512

47a2977e366f1406149d886c2c14725a505ba6839c34a917ea144cf3cc517663a6a89fb73fab243f5ce878890be48c73500acccd24034ca62377d7133a5c340b
SSDEEP

3072:w1uXZA71F6zqSaYbROkKk7kvBdInf/M62yDvbi:xOWqSjpx7Kyn30y3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8c79d734d5ae0c97a401d9b2a9c179_JaffaCakes118

Files

fb8c79d734d5ae0c97a401d9b2a9c179_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

0
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 112KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ