fedfb685211d809102dfdc77c906c35b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fedfb685211d809102dfdc77c906c35b_JaffaCakes118
Size

385KB
MD5

fedfb685211d809102dfdc77c906c35b
SHA1

cb85fdd88a2894d1d3562e04c52ff04c33333bbc
SHA256

6659124f1f6bb37afff4e0f2996ac6118896bacbcdddd1c11b1629b09072ca39
SHA512

eb29f253f7df6a26247e6a5e523a9b41b963f6d8d3a8f840222e5f676aa0586ed0b0412a3d1dfeb6821939f9f638692368dd392d5f714df1d82bb3532f8c8a08
SSDEEP

12288:s+wUayB5QUvFDc29+i5Jmsdsst3rWeDSWwBB:HwUqxCJmHYr2B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fedfb685211d809102dfdc77c906c35b_JaffaCakes118

Files

fedfb685211d809102dfdc77c906c35b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ