fd362308fff6ffa48d21610064b0a0ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd362308fff6ffa48d21610064b0a0ef_JaffaCakes118
Size

4.3MB
MD5

fd362308fff6ffa48d21610064b0a0ef
SHA1

9653b9cee1a03ced89e971be25a0d81c678c3d55
SHA256

4665730fed13b4c65be9902bd660414e06b6a30b53e10b7b1624a21c19b07551
SHA512

11fadb064ed6a660e31328a2daa64338a687320ec2b4f4d5e1232921bb9450941f0505067b3c4da07ca3744fcc9031409d80bd9e62e49bf875aadd655c5383bc
SSDEEP

98304:bDxbkoWD1G4to8eCNWdFk9vepT49tp7/grb+k:Rbk1y8pYdFk1m09D7U+k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd362308fff6ffa48d21610064b0a0ef_JaffaCakes118

Files

fd362308fff6ffa48d21610064b0a0ef_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dea0e890f1ce11406cf4ec110903dcfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32 shlwapi

Beep /)

Sections

.text
Size: 1.4MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

upx
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

upx
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

upx
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

upx
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ