fae80ee818e18715d3c5fd0c30278646_JaffaCakes118 | Triage

Sharing

General

Target

fae80ee818e18715d3c5fd0c30278646_JaffaCakes118
Size

52KB
MD5

fae80ee818e18715d3c5fd0c30278646
SHA1

b65ce56db1c75851d5688a6393c75e05f2a1e5ac
SHA256

289633017844480cf747255bd9a9b9ccafd022d24364f9c528820629270d346c
SHA512

ba5f4a4dcb90617c019eadaf6bc903667b77cdb1f2ca6fc56f3d50bab6341ab9f1457e164e803691db9eb941d5c1ea71233f66322d0fc88035e1c86b4cd4f8c3
SSDEEP

768:tnDkBZ6fm22Svwd3EaEcbtCfs78XpSIH0:t0Z72EdUapfw5SS0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fae80ee818e18715d3c5fd0c30278646_JaffaCakes118

Files

fae80ee818e18715d3c5fd0c30278646_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

bss
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ