fbc158dfda3d00e6bb4fd43707f49694_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbc158dfda3d00e6bb4fd43707f49694_JaffaCakes118
Size

506KB
MD5

fbc158dfda3d00e6bb4fd43707f49694
SHA1

0d22f1556afc6781015bd9d7a16e2fa1ce326d64
SHA256

2e63571ce67f263cf093ab86e29bcadb7d2065b4e5ea5b630a12e9e620b3baf1
SHA512

36bf0d9935796d413c300b2a5e44f77abc5535d093a6a3e0779dcf20217db0e07e87f1328de976de2d88c653932d52d027ab636476b78778c0b7cdc9f5e7f833
SSDEEP

12288:w5nCS7UyVDt5Lbx0lQH3ob61TYURzg2siNO6LkZbpfQ+DezpjkfA:8CSB73oW1YURzgCVQZbOFjcA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbc158dfda3d00e6bb4fd43707f49694_JaffaCakes118

Files

fbc158dfda3d00e6bb4fd43707f49694_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ