fb8cb0f57d523612589a27582fb90e9d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb8cb0f57d523612589a27582fb90e9d_JaffaCakes118
Size

352KB
MD5

fb8cb0f57d523612589a27582fb90e9d
SHA1

ef01f92b2da12f5113def99ad8edda3022f41008
SHA256

86f66632a0471a9614f6946351491c5946fcd6dd3e1d5aa427944706a14423a9
SHA512

006aa5b65c3ba932c7837d1f32f76eed67a1c957db4fde4f1bf8d658314e21170062637afed9635703bc6580b9181ed97c3cc7dd61cdbd5a8892d19d3a7ce0d8
SSDEEP

3072:NsULXmwS2/O2auChA6Kfa58/6bBSIw10IR5VaiDj6c6KM8KJp5t04eW:q6XmwS2DaBAyhSDiW5ZkVNpteW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb8cb0f57d523612589a27582fb90e9d_JaffaCakes118

Files

fb8cb0f57d523612589a27582fb90e9d_JaffaCakes118
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

mfc90u.i386.pdb

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ