fbd975d6f726bf97134b7e7ebf4d4d15_JaffaCakes118 | Triage

Sharing

General

Target

fbd975d6f726bf97134b7e7ebf4d4d15_JaffaCakes118
Size

2.1MB
MD5

fbd975d6f726bf97134b7e7ebf4d4d15
SHA1

1d46b889442e702f7839d5a63997a388e4626875
SHA256

0529d77af66051447ae9c9706c35ad243b517275c4d12c98133ba0d32375f104
SHA512

1228ed8f81ef8f20da7d4cec9e23cbd0802f552a4b3230a290d708a26fcb77e1285dcf939ed876c156ea62c4641597fd1262e346549f1b8dd737fab18958c8d5
SSDEEP

24576:d8StzJfPi1dJU43I98U7nYYJ2tHhADSANLHgZpJEMLY59FF96X0JxQu54GXibLfA:dxzJ/4MnYYJ2ZhqSGLHkJEMOzHibLfUT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbd975d6f726bf97134b7e7ebf4d4d15_JaffaCakes118

Files

fbd975d6f726bf97134b7e7ebf4d4d15_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

appvlp.pdb

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 180B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ