fbcd2aeb9c8fac155dadf1d379f38e25_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbcd2aeb9c8fac155dadf1d379f38e25_JaffaCakes118
Size

108KB
MD5

fbcd2aeb9c8fac155dadf1d379f38e25
SHA1

df56049e27f9193c7df2945994ee8d7363559a6e
SHA256

276e6663369d61abaad5dbe9c166b45b3a5b60f5458f4efa24fcd5f23b76adfa
SHA512

5a36033bd63468ff8edd580737669dd45fc7a3b99d2d8af4c9118c91d2ba600e26739dc9393f93092c642702849e2449b5eadf711f3663ab3296a59c6d75490e
SSDEEP

1536:h/VbvL54Y5Ov2GCfJCruz93lw4nWEaxVaW2StkGJr010cJa6eLNS5srNIWNcyt:hJvL54tvTCj/WEQaSXcJwSSnNc8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbcd2aeb9c8fac155dadf1d379f38e25_JaffaCakes118

Files

fbcd2aeb9c8fac155dadf1d379f38e25_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ