fbda0ae1c5b3cbcfddf4f7bfc5646839_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbda0ae1c5b3cbcfddf4f7bfc5646839_JaffaCakes118
Size

124KB
MD5

fbda0ae1c5b3cbcfddf4f7bfc5646839
SHA1

cfa7dad9ea0f0df08bdb0f264f8f836fa2d73d5d
SHA256

c5549c96662bd25b9b8ea6bc620ddbd8e3de029956e354016c4e2a9b21262b26
SHA512

ec8be3e7e2d314c079e202e56526784da8854f88a7872ccffacf901a5ed78461a47d739f640642761ca3ec05db12b84e0114765801a9c4e3d92c619a2b64ccb7
SSDEEP

3072:fnUxXYlvjx5P2GeNIvvG1hzrpTenTs0Maofdqd:fnUBS7x5PjmInG1hBTenQ0xjd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbda0ae1c5b3cbcfddf4f7bfc5646839_JaffaCakes118

Files

fbda0ae1c5b3cbcfddf4f7bfc5646839_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ