e074a16750a3b028d130c6c3db5fedc7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e074a16750a3b028d130c6c3db5fedc7_JaffaCakes118
Size

861KB
MD5

e074a16750a3b028d130c6c3db5fedc7
SHA1

cbbf8b020d00e5e2c52a3cf84b39e714c862cea1
SHA256

d25276eb561eb6e8ee290ad946e6aa39dff16fa3cdbd3a83a788b3b6e9b98ef0
SHA512

d692380075133ad12f3a235c7ca7b291b72e43f79935f64104c050848796c3cbe60626ae9df5b2ed746cdf4102466117284cab4569a156c3d8547ef347438d2b
SSDEEP

24576:X9T//d9ekdUykndJGcz/Cc0LBFmwXaCQcm:NT//dwkGGczac0LBFdKCQcm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e074a16750a3b028d130c6c3db5fedc7_JaffaCakes118

Files

e074a16750a3b028d130c6c3db5fedc7_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fsssvc.pdb

Sections

.text
Size: 603KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE