fe0cf8e102bd2a0852083759c8abbeef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe0cf8e102bd2a0852083759c8abbeef_JaffaCakes118
Size

235KB
MD5

fe0cf8e102bd2a0852083759c8abbeef
SHA1

415b02493f45bd5d382ec3eea73cad88ba6392fc
SHA256

1162fb6b317f81c43f38ce6d36527d6b373db8331cc31661b6c7f1b537d88e81
SHA512

638d51a737b0034fd332176f4d6a22e75434ba4bba87c8c5da9de78249d58a770bda04dff786d293f6b44017c3f1a4af9fd5575260f3a22e0a6c697704c2aac3
SSDEEP

3072:9nXBanM1NFNFWdeV9bNjct2OK3phSJkEvf/hCjWutw/atL/pjTqA1:9nxsIN5WoVpqgUf/+WOj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe0cf8e102bd2a0852083759c8abbeef_JaffaCakes118

Files

fe0cf8e102bd2a0852083759c8abbeef_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ