fc1fabf076e6d33cef15014d3e38ca36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc1fabf076e6d33cef15014d3e38ca36_JaffaCakes118
Size

1.3MB
MD5

fc1fabf076e6d33cef15014d3e38ca36
SHA1

51cdebb355bfe90435bc272bfd1065c7e1ef13fa
SHA256

bd3ce7d9e758da59df020c6114654459482bc87375f3c6fea348d9b40759f0b5
SHA512

8195bff18743f3c996acc7c32df26b8a55a389139c48bea69f8aae097e58e3b0cd85749492fba908e646ddb7dfc6e97bb9ed57fb7b4f432a8e517ffd552097b1
SSDEEP

24576:BtpWdh0jZVeVAZLEACVsdXY33OpfPFmcyouLsky35pnEp222222222222222222i:HpKUVe8LEAKs23+pfPFmcslUnEp2222q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc1fabf076e6d33cef15014d3e38ca36_JaffaCakes118

Files

fc1fabf076e6d33cef15014d3e38ca36_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 534KB - Virtual size: 534KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 651KB - Virtual size: 650KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ