3c0c6c0a9e0dfb266a659bd93ce7098d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c0c6c0a9e0dfb266a659bd93ce7098d_JaffaCakes118
Size

812KB
MD5

3c0c6c0a9e0dfb266a659bd93ce7098d
SHA1

76ce06ed524fab38a0718911880ccc9e1d9c905b
SHA256

4ede107bc9209648522151a19c90f36024e6de11bf561afdeaf1740f14e9e1ab
SHA512

ffc630e52112700aa7abf2679a0c5785119b8468b99d9bd2a1f65adac02c55f4e7571e7ae107149aa3c7c65090e7ad7f99e393f84100c12a793795a14a7791b9
SSDEEP

12288:VbwkxUqsPi+JgmDeL3CdmO8UPlHtjXIN6EDfXKrmPEvvrciiHg9jIPka2ii:VbwkguCdD8UPlNjTEDamEv5Yfu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c0c6c0a9e0dfb266a659bd93ce7098d_JaffaCakes118

Files

3c0c6c0a9e0dfb266a659bd93ce7098d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\cygwin\home\nightly\dev\FNP\Service\Build\_release-Windows-NT4-i686\FNPLicensingService.exe.pdb

Sections

.text
Size: 441KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE