feaee1eb211d4c40e47554ba6ca82440_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feaee1eb211d4c40e47554ba6ca82440_JaffaCakes118
Size

2.8MB
MD5

feaee1eb211d4c40e47554ba6ca82440
SHA1

515128d19a848c8e06535913e47d1f1d6b8510e2
SHA256

bbceb9d8cb473caa462e1c51632ef290f77fe1c509863091a9ecde6ca32b914e
SHA512

1d933ac16dbc7a2fc6e0929b0a667cbc953909a23850bcd52e65c72c9ab8c1ae6e8dd2df7983a868d0be252170843b182eacea7403536a105f9824a8ec2db111
SSDEEP

49152:DK3btL2tLMc9IW1dXgfC/MHmgYDkYOMwwnMb4PmyVIc9IW1dXgfC/MHmg:GLV2VMc9IW1dXgfC/MHmglYOXwnS4rVw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feaee1eb211d4c40e47554ba6ca82440_JaffaCakes118

Files

feaee1eb211d4c40e47554ba6ca82440_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\Office\Target\x86\ship\postc2r\x-none\olicenseheartbeat.pdb

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 380B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ