fd32467d03999eb2d0e8a4c08219d400_JaffaCakes118 | Triage

Sharing

General

Target

fd32467d03999eb2d0e8a4c08219d400_JaffaCakes118
Size

297KB
MD5

fd32467d03999eb2d0e8a4c08219d400
SHA1

357b11656a026c8b2a3fcc7b789dbb0b5a6201cb
SHA256

925f71ceb43a8a38ac3e22efb13443488f7897ab0785b1d60cbdb2552ad192ab
SHA512

f92829e8ebd1976b0142b709fe24e930d8027ea13443da4a26ecc0eb176c8ff6098fcc44c814e848d32dbc577ab58e2ecb45aa3fd499d8d5c53205bc1db84688
SSDEEP

6144:H8yv4ksvUGxVQeDa0t8EYkOECEMnj05RoWfvh8EybgjmTc2bA22W:ca8VQeDaZEA7/joRoDjUUAu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd32467d03999eb2d0e8a4c08219d400_JaffaCakes118

Files

fd32467d03999eb2d0e8a4c08219d400_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE