fc2421b1271e366c73cef645d989d69b_JaffaCakes118 | Triage

Sharing

General

Target

fc2421b1271e366c73cef645d989d69b_JaffaCakes118
Size

262KB
MD5

fc2421b1271e366c73cef645d989d69b
SHA1

78fe1cfbc840e1b789aa23e38dbe46c096679b56
SHA256

408ebb78ed19bc4a2a8a4c43867d08daeb9d28b025cb3a6343a9099a8d024948
SHA512

1ef93206c96a6f82bf853bf832f60674a987574d085ed7eb1e79991f82a9a3dfd902f59c3f4372806ad1ce52b9d198621e86d910d0243573613eea1be9a041af
SSDEEP

6144:fmKfWvHlf9Z7T54nDWgRAkP8GkEe6tGQn8xID0DMFe8r8/Gl:OKiiR3P8mGLxe0Dh8rhl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc2421b1271e366c73cef645d989d69b_JaffaCakes118

Files

fc2421b1271e366c73cef645d989d69b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Sections

.textbss
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 222KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 196B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ