fc58a3ba50f26542cab63667d34cdd5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc58a3ba50f26542cab63667d34cdd5f_JaffaCakes118
Size

1.7MB
MD5

fc58a3ba50f26542cab63667d34cdd5f
SHA1

e1aec63ac90a1c216a98e26957735e5c81280653
SHA256

93e38d4ad38d002f80d331f250fcd6f664e0b15f7e8513ffa2b8dcbebd6650e9
SHA512

b5fd3bdeb9a96ab3f1601b80b942758ee32d53d9aa3e9395c97fdaffb6832caaac84cc68be3b583ec999347ae7e830d5b31376268fafd1ce7d31ee6ee7ed1368
SSDEEP

12288:U0G/eQX6k35+NN+BJG08xaffyuuVlrCzITy3Pu+HUgkaDDb17OfjrPmyqbsZCLhR:UAQX63oJGsfNm++ab+myqbsMh8A75

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc58a3ba50f26542cab63667d34cdd5f_JaffaCakes118

Files

fc58a3ba50f26542cab63667d34cdd5f_JaffaCakes118
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 840KB - Virtual size: 839KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 812KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ