fbebbe30ec129a7afc0ace2317d3659b_JaffaCakes118 | Triage

Sharing

General

Target

fbebbe30ec129a7afc0ace2317d3659b_JaffaCakes118
Size

443KB
MD5

fbebbe30ec129a7afc0ace2317d3659b
SHA1

68d856092461e54e190f1b92c8f9c10319160b69
SHA256

e2c35f01e14995f03bf3a35095a4b66b8a49e1cf0c7e5b8ed07ef8f17ec4dce3
SHA512

9f497b48c496f86bbe07a6580ca7006c678d12e1b94d7328ee703a548aa9b8e9a2b07b4d0399d938ef92efaaf90ee8b446dd44ba545d8ebcbe1119e3ecb246b1
SSDEEP

12288:KG5XgGADGEjiQ0zbrmjumd09bGkaMdcoCl6X2uiX3Aw:F5QGBEGQGmIbGAdcoCEX293N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbebbe30ec129a7afc0ace2317d3659b_JaffaCakes118

Files

fbebbe30ec129a7afc0ace2317d3659b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.hf0n36
Size: 1KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.b1pgsw
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: - Virtual size: 3.0MB

.null
Size: - Virtual size: 444KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 437KB - Virtual size: 440KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE