afd04335b3d20c48bc628a31c1cf6b94_JaffaCakes118 | Triage

Sharing

General

Target

afd04335b3d20c48bc628a31c1cf6b94_JaffaCakes118
Size

307KB
MD5

afd04335b3d20c48bc628a31c1cf6b94
SHA1

8375127cbf9893750dcbef17822ec7ac894f387d
SHA256

039cc000815b7b2d7cabec454fada705b635d2d5522bf14ac7e0c87ae3b89af4
SHA512

af1a6e87cfee9c466108989c5e89e7a7c45b8e9b96cd8b59f3459b1f3059603aff45439c31deccc4150d38f75b8831f16de53e03072176cb73c1120984500563
SSDEEP

6144:MaZLI3kd8UI+UMIgUL6yX8BlJn5A4CTQRdYHxdAdclxEP04bo9T4W5AOnCGv/x69:Mg0bUI+K+dGxEQ9xsGvJ69

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afd04335b3d20c48bc628a31c1cf6b94_JaffaCakes118

Files

afd04335b3d20c48bc628a31c1cf6b94_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

FacebookUpdate_unsigned.pdb

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text/DE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkh
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE