fb065a2c2ccab194045b8357964e6e3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb065a2c2ccab194045b8357964e6e3a_JaffaCakes118
Size

392KB
MD5

fb065a2c2ccab194045b8357964e6e3a
SHA1

52aef1215ca20e9b35765109dc9505e7548198fd
SHA256

2ab505f86529e850b719d3efba4bccbe9e8be5db959c92e254fb82cc2eb83162
SHA512

36cd2c00205ffa7f206c728a239ce669956862178e84ca6584548bb0a3390110c0f2edf1ca6e4e3f0ff03cb259e336d3a1f230fb05bce7c434b8b45f87ac36c8
SSDEEP

12288:r23GOSPWZmAhoMtntGGzGtGGGlGtGGGGFGGtGGGGGqGGGtGGGGGGyGGGtGGGGGGo:rOGVW+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb065a2c2ccab194045b8357964e6e3a_JaffaCakes118

Files

fb065a2c2ccab194045b8357964e6e3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ