fb1f7dcb58f7b05dc384b2b6c8cf03eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb1f7dcb58f7b05dc384b2b6c8cf03eb_JaffaCakes118
Size

171KB
MD5

fb1f7dcb58f7b05dc384b2b6c8cf03eb
SHA1

311d79124a8001e22d17abe5d6633ced588c2ee9
SHA256

c8a28d0c9b02b7f2c87a1f97d63d24f6d09d509e9a211544280ef57bb4df5d3d
SHA512

739ebc6c3a55585bd6747c9db7b863493f1e86e1db292802e77b5a399d8fe45925fdcdd526bb1b2e67c390ed86d057150af15ab39a2c20c676df8df2d0f17fcd
SSDEEP

3072:2AlojHw1jYtV8K++YZEfUPWPMgEHMtJXpm7bITdG0bPY:2Alorw1jYf1++Y2MPWPMgMfI5G0DY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb1f7dcb58f7b05dc384b2b6c8cf03eb_JaffaCakes118

Files

fb1f7dcb58f7b05dc384b2b6c8cf03eb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ