fb0d30ea7b42871b000f02523fbd3353_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb0d30ea7b42871b000f02523fbd3353_JaffaCakes118
Size

3.2MB
MD5

fb0d30ea7b42871b000f02523fbd3353
SHA1

90d72a1be07273beb2c3d2946feb57f37457b788
SHA256

e65cbcb1ebc347bef8ec285b4926067f99e27bfde697d19a70bae83ebf3ac8cb
SHA512

34c4b0f9fc1b6ff414e4ef887d104d572835ab3295cf6ab6ce40bbf52c2c46b5c8a12e01633b4fbe684bcd05d99bdc5b6a78eb8d4bc079089d1e60088511dad6
SSDEEP

98304:QLWoC8T+n7RO7e83/15cfhjunEZiE20GlCRgJ:KX+ngT/uIEU0GAgJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb0d30ea7b42871b000f02523fbd3353_JaffaCakes118

Files

fb0d30ea7b42871b000f02523fbd3353_JaffaCakes118
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ