fb4937a305018c260bab4e9efeb73aff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb4937a305018c260bab4e9efeb73aff_JaffaCakes118
Size

250KB
MD5

fb4937a305018c260bab4e9efeb73aff
SHA1

2be3bb6a99b75348414fc70937587d8ac1428df0
SHA256

68661658a55b8e18f78480443bf584c1f00ddca41f93420cc80c18a15237e5a4
SHA512

ceea123455d075d3776432bd1df31367959287d45af8d6b5a4e5d7da195f84ca5ab101cf55e41c6577d21a7686c65f7ca5c0ed6b6e16dda901df9e449bb596e7
SSDEEP

6144:IdbC+2kY+FP7R6r7foSlbwIo9GbB20uomncm49aXie4iy:FuRs7QKbwYTmnu9Iih

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb4937a305018c260bab4e9efeb73aff_JaffaCakes118

Files

fb4937a305018c260bab4e9efeb73aff_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msiexec.pdb

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jgd
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE