fcf29890112755e71b829b37aac0781c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf29890112755e71b829b37aac0781c_JaffaCakes118
Size

119KB
MD5

fcf29890112755e71b829b37aac0781c
SHA1

272b12082d36a642c3f196e87f095ee235c933b8
SHA256

7c935a8bf5de76a3f497c9ea9e0b681b4ca30707f37e7b704198cec6d931ec5d
SHA512

cc259418a15cebc37a11f9b0207b8530f97e4c4324d3972e3dabb3a02cbbdad1e26ee9a2bafe7df24c318edb3daa040ca257195cf90410637283b3cd6084ac94
SSDEEP

1536:e6FLQvtYxdOXNGDnKp1xWwxzhDhw75oUL3Twg7tjS+7X1tRvtv:eWLQv6DxnKpFLEHLR74cX1tRvtv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcf29890112755e71b829b37aac0781c_JaffaCakes118

Files

fcf29890112755e71b829b37aac0781c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ