fe100c6db7150540fc82f397582a3c5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe100c6db7150540fc82f397582a3c5f_JaffaCakes118
Size

52KB
MD5

fe100c6db7150540fc82f397582a3c5f
SHA1

f4e78fe39a2df6f9f142c33e0bedc4635d90a844
SHA256

1e991ec3d925a76ba16615df394d81fa91d329e4311cbe3706133d8bb60589af
SHA512

1d0d4633348f25ef08b66ee726528779c21b067cb9e2485f76de689cf20787f6453fd61125cd05036ee62ce9de743b40346fd38e1867eb7ab60eba3a656c8ef4
SSDEEP

768:ooOin9JiZVR4mzUI7OC1UiAVBGMt2q06:WinTi3RzzUQR1Uj8V6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe100c6db7150540fc82f397582a3c5f_JaffaCakes118

Files

fe100c6db7150540fc82f397582a3c5f_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ