fb8ae5c28d9b131662680bbbbe5ef8d2_JaffaCakes118 | Triage

Sharing

General

Target

fb8ae5c28d9b131662680bbbbe5ef8d2_JaffaCakes118
Size

212KB
MD5

fb8ae5c28d9b131662680bbbbe5ef8d2
SHA1

c82728d7a5e2ac04b5beb026b87ce8112c8181f7
SHA256

0b25e4800fc9e8d47b161b2cbce645f00367b1c99373d78e201acef3ae729077
SHA512

0dbd461b94f8238cba9bf202cf50165fd77c58a6cedd13da14eea2ec7c447135550ba1205dbfe54d6c07ab982ba27c04b652f96d70d4428aa436d14b2d2e4f77
SSDEEP

6144:FAatg/vSJZxEV/3lSmCxZCxqpfRAEwsDX7e7jk4l:O8gMxo9Sm+CsfSENXMLl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8ae5c28d9b131662680bbbbe5ef8d2_JaffaCakes118

Files

fb8ae5c28d9b131662680bbbbe5ef8d2_JaffaCakes118
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

tzupd.pdb

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gda
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE