fbfc94a1e535198afddf70004e785885_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbfc94a1e535198afddf70004e785885_JaffaCakes118
Size

315KB
MD5

fbfc94a1e535198afddf70004e785885
SHA1

41f1f26dab26b9d9480a58f6aaf88ae95262cc0e
SHA256

c03d9853b6f526a03eeea558183be96356027a1cf478470916fba490cad80b80
SHA512

a62e05fa31a987366035d6cbaed6fda1be8762c77b9f94b3059808b38e998d68dd6789846b249cbb2ce8d693e63258a96b946d000da0106dea0c098140a57aaf
SSDEEP

6144:4j64QjXEgNkcbVqslb7iZRd15idgrpFbtNWdUlMsWA62AGdQFjTkw:dbtrb7ibdeGr7xIUj62QjR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbfc94a1e535198afddf70004e785885_JaffaCakes118

Files

fbfc94a1e535198afddf70004e785885_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 92KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 59KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 149KB - Virtual size: 452KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ