1c8fd7cf305527bd598cdf8b90308500_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c8fd7cf305527bd598cdf8b90308500_JaffaCakes118
Size

48KB
MD5

1c8fd7cf305527bd598cdf8b90308500
SHA1

493681cf4a3591050f570d87b9fe9c5cf5e990fb
SHA256

485813c243f21d264f3ce1419083e235ea7cc4b59b982f87dabf340d2ce1ccaf
SHA512

f624d421b4f7031257e36a239776f5b0f7580e9dc2f79b242590ec59b7a3531380b2ee924b4a5ba5f610c1536a201e28fb55fddfd913f8626bf56859dc07cdbb
SSDEEP

768:UgjsY2XxHoiadfDnqrfEcbj+ofJUEl9XJPZM4R5txNbRrKKR954xB9y:1ia5jqrfEMJUEbooPRrKKR954x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c8fd7cf305527bd598cdf8b90308500_JaffaCakes118

Files

1c8fd7cf305527bd598cdf8b90308500_JaffaCakes118
.exe windows:5 windows x86 arch:x86

eee9062b8cbe1efb89c250150605b1a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FatalExit

Sections

.Elbng0
Size: 15KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Elbng
Size: 984B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccp3p
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE