fe915b58d6b749176e9aa9568825a39d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe915b58d6b749176e9aa9568825a39d_JaffaCakes118
Size

792KB
MD5

fe915b58d6b749176e9aa9568825a39d
SHA1

ee73275cc7144c5e16e3899ec72557ad3d14883e
SHA256

d038898edd466d7e9320a72822dce254ec10b85f9ceaf0e8d0c7a10a37648f5b
SHA512

f0bc9090e7e576147fffc2b966808c29171b4b5c9faed4ca86943b9c60518bd2adb9fb40f7b354305680e62853edf3657de1dd74683710adfdea4bf3bf0223bd
SSDEEP

12288:6RjZEE09FFw2FZSNKLIP18Y58hwmC6QcI62E50+FQ5oupuRVixSm3NEe8aCEKT:OVETjFw2FZSNKLlYM2E5LFjm3NEe8aC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe915b58d6b749176e9aa9568825a39d_JaffaCakes118

Files

fe915b58d6b749176e9aa9568825a39d_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 526KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.cyxvc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE