fbd2cfdc7b1204a118a84b2321c63e29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbd2cfdc7b1204a118a84b2321c63e29_JaffaCakes118
Size

385KB
MD5

fbd2cfdc7b1204a118a84b2321c63e29
SHA1

c97f68b6cdb30485e89f1d65ce7398be5cc9cc19
SHA256

2710aa7f35bb68d0e99d757fa3ab04de70bc51df001cf2200b7c03605892e52c
SHA512

c8ae1f162ba262829320fe45ca5fe03b0afcb37e60cd2f5b9413b3c83b3642fd2f6823886863d89281c80271e3004ad578a369cd897b808972567dc79b3edf2d
SSDEEP

6144:9yJn+FY0PMZb3caS0dt7anIFhh8oHiAFEMzGN8RxpBu80PftIQyZ/7B:9yN+FYDhTdxaIFVHiAFFzGNix3YFIB7B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbd2cfdc7b1204a118a84b2321c63e29_JaffaCakes118

Files

fbd2cfdc7b1204a118a84b2321c63e29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ