fbe0d65501e1f467bc5884fb6c2c6ef2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbe0d65501e1f467bc5884fb6c2c6ef2_JaffaCakes118
Size

385KB
MD5

fbe0d65501e1f467bc5884fb6c2c6ef2
SHA1

2fc481c6629ced8f12d60eb3fbb0cac2996e4d2e
SHA256

6dc0b84da1d7ce62eaea943e73e28fc692f236cc0271992cac9a25df841d1609
SHA512

e30bed0173d9ff05b9fe45f6f84f3a98aabf94e92c7e06604c8e4fd288d174ded89c623fab6dd868df3a824a0ba130c22f331fb3003203d7f428cf18991f4fa7
SSDEEP

6144:YaoQ8/CA8W/NPnb4uy5M2CFT7InnpNRKHm/5WTlUv3GPj7LfXgy127AMgk9KEHB:Yh5/lnlr2C0pNR2Zu3kjH27AC/B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbe0d65501e1f467bc5884fb6c2c6ef2_JaffaCakes118

Files

fbe0d65501e1f467bc5884fb6c2c6ef2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ