fbfa7934ec1f9234f94549243d0dc68d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbfa7934ec1f9234f94549243d0dc68d_JaffaCakes118
Size

1.3MB
MD5

fbfa7934ec1f9234f94549243d0dc68d
SHA1

0572847409b3f4fdba850a6a0468d2f2869c3cff
SHA256

459a9769ef65153c85f73cd70c4fa0510521d2e7049079891d203b87add80998
SHA512

eccf279b27c86edaedd161790b43110bd01d7915b3e9006d0b49251f4a669d8abfd1b53588a5aa3c9e963ecd81a8d16ff3614e84613de797bd27af94e2377611
SSDEEP

24576:/AttUuz9LUu8NhjOI7cfjMDYEx0jGJqZpgG6TuALayxn:hC9wuqjOCugDYEx0jQqjhgLaen

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbfa7934ec1f9234f94549243d0dc68d_JaffaCakes118

Files

fbfa7934ec1f9234f94549243d0dc68d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ