fbae261ae16f6592fa961b1e6a4d7f80_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbae261ae16f6592fa961b1e6a4d7f80_JaffaCakes118
Size

1.5MB
MD5

fbae261ae16f6592fa961b1e6a4d7f80
SHA1

413d2c5274301ec6a4ab8686feeddd8ed4fe3406
SHA256

e11064adfd22bc40ad2d5e2d347647f4e0c4b059d8744d90fbcd76b1b27dd89d
SHA512

c915b799078a3ef3ac74d894260c88c4e7880666e3abc2d43d7ad11adba7320f45f10b70eafd55b8f035e17a37803c0e1b323f9cb5c1bb86321006d68ab808b2
SSDEEP

49152:wMiDa1cbr5qiJ0k2pUSHFK8EBGgovNgpRiYeAu3Chw:l1ubr5qWGHFpEsJNtAu3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbae261ae16f6592fa961b1e6a4d7f80_JaffaCakes118

Files

fbae261ae16f6592fa961b1e6a4d7f80_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 6.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE