fe81cb9934c01535f7c23698e57b64fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe81cb9934c01535f7c23698e57b64fe_JaffaCakes118
Size

189KB
MD5

fe81cb9934c01535f7c23698e57b64fe
SHA1

060ac24e7d256c86e543509eb548f2138a6bb60d
SHA256

e068bf324308f5a346e794dc11f02b0142c1c9c0fbd8ae19e182855b9dd74d61
SHA512

0c289dba83321e8ac76402d99187ddc64cebadf30ad3030dba38960c6501b4608cca1f95da6743c32497f7740a8a90d66474c3e8694694a487b0cdf79f7782e2
SSDEEP

3072:BgVQb/dTWrtKCMbcBfri4Sk59pIrO9cTO6mYV8iUJq7G/zx8k5oX0W7MKLji4kta:lWJh2E60pbmUY77oxj5oXX7MKTyAU4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe81cb9934c01535f7c23698e57b64fe_JaffaCakes118

Files

fe81cb9934c01535f7c23698e57b64fe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE